The whole AD security model is outdated. When something is wrong with any of a domain's services, your organization is breached. There is variation in details

The whole AD security model is outdated. When something is wrong with any of a domain's services, your organization is breached. There is variation in details like in how to exploit vulnerabilities or how to move laterally... But AD is a SPOF, cloud or not.