The difference is simply though that they own the entire scope of the privacy concerns on prem; even if they manage them poorly. In the public cloud, as an eng

The difference is simply though that they own the entire scope of the privacy concerns on prem; even if they manage them poorly. In the public cloud, as an engineer/employee/government I can just login to any given XEN/KVM/SmartOS/Whatever host that's running your instances and simply read your secrets and even if your opsec is perfect there's nothing you can do about it. 'privacy' in the cloud is not about mismanagement/good practice -- it's about who is able to act on it. There is no way that anything you have running on infra you don't completely own and control will ever be private; to even a casual observer it's obvious that there is absolutely no defense or privacy possible in such an environment.