Our Dumb Security Questionnaire
&gt; If you don’t use a cloud provider: why not?<p>This makes it sound like it&#x27;s a negative, but a solid argument can be made controlling your application all the way down to the metal is a <i>more</i>, not less, secure way to go.<p>We can all make opinionated assumptions about whether a cloud provider is &quot;more&quot; or &quot;less&quot; secure than doing it (whatever &quot;it&quot; is, exactly) on your own, but even the fact that it&#x27;s so debatable proves that it&#x27;s not really a defining point that should be on this list of questions (although it might be to an individual team, especially if you&#x27;re trying to bring things in-house in the first place, but of course this set of questions is really relevant to SaaS.)