I have a friend who is an IT manager for a large chain hotel in the Caribbean. I keep asking him about why they still use on premises equipment and it boils do

I have a friend who is an IT manager for a large chain hotel in the Caribbean. I keep asking him about why they still use on premises equipment and it boils down to: * Cost for training / transitioning + sunk cost fallacy * Perceived security risk (right or wrong) * IT is mostly invisible and currently "works" with the current arrangement, why change?