Devices that connect to the SUC only temporarily (laptops, phones, removable media) are considered for the additional risk they bring to the zone they join and are placed in zones of their own.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.