Get your head out of the clouds
If you think using the cloud means someone else is managing your cyber security, you need to get your head out of the clouds.
Cyber 3-2-1: Why do you rob banks? Because that’s where the money is!
Cyber 3-2-1: Why do you rob IT providers / SaaS services / legal firms? Because that’s where the data / money / reputations are.