Many MSPs have far laxer policies than the customers they are servicing. Sometimes they will even go out of their way to undermine the customer's policies in or

Many MSPs have far laxer policies than the customers they are servicing. Sometimes they will even go out of their way to undermine the customer's policies in order to cut costs or make the work easier. It makes them a far softer target while almost guaranteeing the same payoff - if you breached the MSP, getting to the customer becomes a much more trivial affair.