A microservice trusts every request from the internal network without checking identity or authorization. What is the main concern?

1. The service uses too many separate functions
2. Encryption at rest automatically resolves the problem
3. The service must expose its database publicly
4. Network location is being treated as sufficient trust