> Why would you put a WAP between devices you control and your own infra

Checkbox security says a WAP is required and no CISO will put their neck on the line to approve the exemption.