Hybrid by default
Most environments I work in are not fully cloud and not fully on-premises. They are both, at the same time, with identity and data moving between them. My focus is making that boundary deliberate: Entra ID joined to on-premises Active Directory, site-to-site connectivity that holds under load, storage that lives in the right tier, and cost governance so the cloud side does not quietly grow past its value.