I've sat in many pitches where, ironically, the argument is that Citrix is more secure. We use multiple desktop products where the modern cloud version was literally just a Citrix cluster per customer, running the same old app. It's absolutely endemic across enterprise products as a "cloud solution".