All the more reason to not rely on the cloud provider itself as your security vendor, I suppose...