> so you don't need to spend months working up a contract with a new vendor and doing the security audit dance.

That's a very big moat. Many decision makers are risk-averse w.r.t to infrastructure vendors and don't mind paying (or making someone else pay) a premium for that.

The only thing that changed in the saying "no one was fire for choosing IBM" is the name.