Comment by mc32

On the flip side customers lose control over their environment.

If you work in regulated environments this can be s big deal and this validation process becomes captured (forced) by the saas provider.

If you ran your own you validate and keep that unless new requirements. No need to revalidate every time a new release is out and pay for that re-validation.