Why I run Talos Linux on every cluster I control

Every incident retrospective I've written that involved node-level drift traced back to the same root cause: someone, at some point, SSH-ed into a box and changed something by hand. Talos Linux removes SSH entirely and manages the node through a typed API instead, which sounds like a small change until you've operated a fleet this way for a year and realized you've stopped writing that kind of retrospective.