SAAS it's increasingly requiring security experts in house anyway. Yes the cloud providers can help, but they may also be an unknown liability.

Obviously we're not all going to build our own CPUs from sand at a local beach. So there is a balance between DIY and vetted suppliers