I was pretty befuddled when my company IT switched from self hosted storage to commercial cloud accounts for incredibly sensitive info.

I think the reasoning was cloud accounts are easier for the masses than mapping a drive and accessing over VPN