As an "enterprise" end-user of a SaaS solution you still have to secure the client devices, right? What's the point of using a secure service if the devices (ph

As an "enterprise" end-user of a SaaS solution you still have to secure the client devices, right? What's the point of using a secure service if the devices (phones, PCs, LANs) can be easily hacked and all information leaked? I think securing a self-hosted server is a lot easier than making sure the end-users don't leak the data. Servers are usually built with security at their core and provide more safety tools (firewall, monitoring, etc.) than the client devices.