Yeah, it's a matter of risk. Rightly or wrongly you could get hit with a lawsuit that says "we have infected your entire control plane; open-source it or die" and every cloud provider has to weigh that for themselves.