Your organization is migrating critical workloads to a hybrid cloud. The network team proposes extending the existing flat internal VLAN into the cloud VPC to simplify routing and accelerate the cutover. As the security architect, what is the BEST response?
A. Approve, provided IPsec tunnels encrypt all inter-site traffic
B. Require micro segmentation aligned to a Zero Trust reference architecture
C. Mandate east-west IDS sensors before the migration begins
D. Defer until a cloud access security broker (CASB) is deployed