In many ways the real story here is that the cloud makes certain kind of shortcuts thats incredibly common in aggressive organizations where "does" are promoted

In many ways the real story here is that the cloud makes certain kind of shortcuts thats incredibly common in aggressive organizations where "does" are promoted over "critics" exponentially more likely to lead to serious negative consequences. In the past an insecure shortcut was a unsecured and unaudited consumer grade network-share sitting somewhere on a lan, today it and Internet facing cloud service designed for publication used to collaborate on "internal only" document that should not even have been viable to the entire company. It's not that the cloud is "insecure" but that it makes it way to easy for those who should not make IT decisions to turn to shadow IT solutions in order to avoid having to adhere to cumbersome bureaucratic processes and corporate governance frameworks and "get stuff done".