We run all PaaS except for two very special case VMs. It is an effin' delight not having to worry about security, maintenance, updates. I just deploy my code (app services) and query my data (azure table storage, azure sql). Shit just works. Every time I need to deal with the VMs I cringe.