Not just compliance
If offered a bright orange pill I'm guessing a fair number of people would ask some questions before swallowing it (if at all).
With cloud you are "such a square" if you don't just wolf it down with some vodka.
Cloud will make your worries go away!
Sod compliance, most cloud services installed by well intentioned users don't get past the first
"I better check this is the official client from the real domain".
I understand the attraction, once the balance is found where "net down" equates to "still able to work" IT might take a better view but we are in the mad rush mode where if it's new it's good right! Services need an off-line use and data backup, rating. If it does not work net down and the data is not yours for the easy constant backup then move on.