Re: Which is a bigger worry?
If banks take a similar approach to the DoD, then the banks will likely be in good hands.
Checkout GovCloud if you don't believe me - it's not "just" AWS/Azure. It's effectively large-scale managed hosting - you can only connect to the private side via authorised connectivity and the Internet facing side is very strictly managed.
There are no "shared" DC's allowing public cloud/GovCloud in the US (I don't know enough about non-US GovCloud-type alternatives to state if this is universal).
Biting the hand that feeds IT
