I think their point is that it gives you a relatively stable env, and allows you to be the one deploying and configuring infrastructgure. Anything that can be miscommunicated to client on prem deployment staff will be, in a lot of cases breaking guarantees like HIPAA compliance.