The hub-spoke Virtual WAN architecture doc needs updates to reflect recent Azure changes (2024–2026).
The Routing Intents section only covers "Internet" and "Private traffic" intents. Add documentation for Forced Tunnel mode — internet-bound traffic inspected by a security appliance then forwarded via a learned/static 0.0.0.0/0 route to on-premises, rather than exiting directly.