Software-defined network isolation is a category error: any control enforced by software on addressable hardware can be defeated by an adversary who owns it. Physical isolation has real limits too — and the industry refuses to discuss either.