Agents phone home instead of waiting for commands. Outbound connections only, no exposed cluster APIs. VPN configurations vanish. VPC peering disappears. Firewall rules simplify to "allow egress." Security improves because nothing listens. Centralized management across distributed environments without the networking archaeology that usually comes with it.