Zero trust works well in enterprise IT. In IoT and OT environments, its assumptions quietly fail. And failure often occurs in ways defenders don’t see until after an incident.