Comment Re:Cloud = Servers (Score 1) 107
Sure, cloud hosting providers aren't going to prevent you from accidentally leaving your database open without credentials. That's not an advantage of either on-prem or cloud, they are both exactly the same in that regard. What cloud providers DO do, is make sure you don't run unpatched code with known vulnerabilities, and that you don't use obsolete vulnerable protocols. At least, not unless you're literally just renting hardware and managing it yourself. But then again, that's your own fault.
What you say is not credible, the provider has no way of knowing what your software does, whether it is patched or not or has known vulnerabilities. All they can do is auto update the underlying OS the same as would be done with any Linux distro.
We have some customers using AWS and it shocking how out of date their VM images are. Some of them using Amazon Linux don't even have systemd support. I remember having to patch our system to not be fooled by Amazon's half assed head fake where they pretend to have some systemd files for "compatibility" without actually supporting it. What a clusterfuck.