Indeed we deploy to 5 cloud providers, and we give full root ssh access to the VMs (even if we didn't there is always a way to get access through the web ui, th

Indeed we deploy to 5 cloud providers, and we give full root ssh access to the VMs (even if we didn't there is always a way to get access through the web ui, think about WordPress plugin for eg) Some users used the vm to do ddos, port scanning, crypto mining, sending spam, hosting illegal stuffs, whatever you can imagine ... But worse! But we had exactly zero issues with people's providing a CC