Yeah, but who’s going to seriously spend much time and effort to try and attack you? Obviously you are always at risk of automated attacks when a vulnerability

Yeah, but who’s going to seriously spend much time and effort to try and attack you? Obviously you are always at risk of automated attacks when a vulnerability comes out and attackers scan the internet for any exposed service vulnerable to it, but otherwise you’re not anything like the kind of target that a cloud provider would be (that they’d try to random for millions of dollars if they’re successful, and would have the personal data of millions of people to sell on the dark web when they don’t pay). Unless you’re known to have data that’s particularly interesting, your risk is nothing like what they face…