> it's far better to let someone else manage security updates, availability etc.. That is where I will respectfully disagree, having seen many companies do a l

> it's far better to let someone else manage security updates, availability etc.. That is where I will respectfully disagree, having seen many companies do a lot of hand-waving (and acronym-throwing) and have abysmal practices underneath. There is no way for me to verify that. And I really do not want to have to explain to my customers that I'm sending data about their activities to an external business. I'll stick to my own data gathering solution for now, I guess.