This is not all or nothing.
You can absolutely have an internal network and networkong onprem on the edge and also have zscaler utilized.
Those larger global 400 customers all likely have a hybrid model of onprem and cloud…some of their apps are in cloud and some are not.
Dreamer