Thank you for this perspective. Other companies have told us similar things, and we're generally willing to be flexible to help accommodate a security checklist

Thank you for this perspective. Other companies have told us similar things, and we're generally willing to be flexible to help accommodate a security checklist. One easy solution we've talked about with some customers is to ship a docker image which uses their own DB/infra to perform migrations, so that customer data isn't touching our servers.