You’re conflating sales pitches with actual business decisions that management make. I’ve been on the decision making board for a few companies and the pragmati

You’re conflating sales pitches with actual business decisions that management make. I’ve been on the decision making board for a few companies and the pragmatic reality is the only time people cite security as the reason for moving to the cloud is when: 1. They’ve lost all their sysadmins / security staff and thus need to outsource that governance 2. When they’re looking to delegating responsibility (ie say to the customers “it’s an Azure issue, they’re fixing it”). In both instances it’s not about Azure / AWS / GCP being more secure, it’s about _WHO_ owns the responsibility for securing. The difference is important. More often the actual reasons for migrating to the cloud are cited as cost saving (which is often misunderstood too but that’s another topic) and quicker deployment times (this is probably the strongest valid argument in my opinion)