Having no separate network with a DMZ leaves you with no single point of failure, but is somewhat complex to manage.