Comment by pu_pe

Sorry but I think it is indeed much easier to have a cloud provider take care of those things. That's partly how we came to the situation we are in: a lot of people outsourced this type of work to Microsoft or AWS, because it was easier.

I get what you are saying, that responsibility is still yours for making the correct choices, and to know what the cloud providers are doing. In the real world though hardly anybody cares, even though we have threats like the CLOUD act in place. So, yeah, people should care but ultimately they often don't.