The threat is not the cloud provider and this has nothing to do with physical access. The software vulnerability can be exploited by anyone with network access

The threat is not the cloud provider and this has nothing to do with physical access. The software vulnerability can be exploited by anyone with network access to the machine.