> Indeed, one reason to outsource stuff to a handful of giant providers is that they do a much better job of security overall.

Is that really true?

Shifting infrastructure to the cloud makes it cheaper, it reduces the incidence of security problems, but it magnifies the impact of security problems when they do occur.

Is that a "better job". How do you measure that?