Most of the time these are behind a firewall so bugs are not that dangerous. Also most of the companies that choose on-prem have their own sysadmins and are mor

Most of the time these are behind a firewall so bugs are not that dangerous. Also most of the companies that choose on-prem have their own sysadmins and are more capable to protect themselves. On-prem requirements can be legal, but also it's a bad practice to leave core business processes and data outside of your control. What if the vendor decides to raise the prices (like Atlassian did) or to discontinue the product altogether? The stability of the company can be hindered by a "management decision" outside of your control. That's why I think on-prem wouldn't be dead, even for smaller companies.