Should people write their own crypto algos and databases too then? All software has bugs, all software is exploitable. SaaS providers need to be better held to

Should people write their own crypto algos and databases too then? All software has bugs, all software is exploitable. SaaS providers need to be better held to account for their failings though. Held to higher standards too. SOC2 is a joke, especially if you have buckets of cash or know someone in one of the big four. Most other certifications of that sort are too. I think we're starting to see more companies rebound away from managed services though. It's more work and takes more time, but at least it's easier to wall sensitive services off and lowers a hacker's incentive. Not to say we should all go back to bare metal, but it's probably worth giving more weight to self-hosting COTS rather than shoveling money and risk onto SaaS providers.