"xposed to the world by a fumble-fingered third-party supplier."
No matter how good Cloud security is, this type of clusterfuck will always exist as a risk. Bet they don't talk about that much in sales pitches to corp execs. That's why its better to exclude in-house IT from these off-sites!!!