My opinion as I stated before, is to follow the money trail. I'd trust Digital Ocean or Rackspace over Azure, for example, because Microsoft does get some mone

My opinion as I stated before, is to follow the money trail. I'd trust Digital Ocean or Rackspace over Azure, for example, because Microsoft does get some money from advertising/tracking. If you're terminating TLS directly in 'your' cloud VM in Azure/GCP/AWS, I think that's an acceptable boundary as I don't believe these companies would risk accessing customer VMs (since it's not worth the backlash they'd receive in return from being discovered).