Fair, but... How many actors globally are trying to specifically break into the average person's machine and map out their home network, ports, services etc? How many American homes (or, well, citizens of other countries) have to worry about insiders and spies selling confidential info and stock tips?

Maybe this is a silly way of making my point, but I just think the average person's home is much less of a juicy target and has much less of an attack surface than a cloud provider. (edits for wording)