For company that values their data, using amazon or google or Microsoft is not an option.
Yeah, that may have been the case in the past. However, nearly all (if not all) companies, including those with significant regulatory requirements like financial institutions and healthcare providers, are moving to VPCs. Even the CIA uses AWS for classified information. Sure, they needed changes (customer managed keys, for example) to make it work, but the cloud providers have responded.
Realize that the cloud providers have a large reputational risk around security, and can afford to hire the best experts in the world. Their teams are the ones who are defining the current best practices around security. It would be a rare company that would be able to compete with that.
Last edited: