A bastion host can gate access to private infrastructure, but it is also a single point of failure, a maintenance tax, and an operational bottleneck. It demands patching, monitoring, credential rotation, and policy enforcement. Every hour it lives, it grows risk. Many teams want the control it provides without its