In a world where successful exploits may be inevitable, relying on a perimeter WAF for application security leaves entire environments vulnerable unless adequate security tools and policies are implemented.
https://www.securitymagazine.com/articles/98675-waf-is-woefully-insufficient-in-todays-container-based-applications-heres-why