That doesnt change the fact that it's (a) high value target and (b) highly likely to be compromised by the people they worry about most. Whereas on premise means hackers run into who knows what apps, network configs, routers, OS's, etc. Lots of extra work for them. Plus some company and its employees dont have access go your data without a risky subversion.