On-premises data gateways

[MikaelJcSoderberg]

Should On-premises data gateways be allowed in a Corp landing zone?
In this scenario those Corp Landing zones has connectivity to on-premises though VirtualWan.

I see it as a problem that it allows the Workload team to create bridges to outside networks that are not steered by the platform team.
Logging in the Virtual Wan/vNet will never see the trafic.
No(Platform Enforced) rules would apply on it.

Hopefully this question in clear enugh,