What happens if the majority of infrastructure is provided by a small number of cloud computing services? An attacker with access to those services needn’t stake their own funds, and an “attack” might simply entail complying with local laws.