When you think about risks it’s productive to understand what could happen vs what may.

I was a stakeholder in an early cloud negotiation back in 2010-11, and one of the key issues was the support personnel. Ultimately, they have access to your data.