> if non IT companies had their own IT department

I think you vastly underestimate the cost of on-prem IT, especially for small and medium sized businesses. The "floor" cost of your own IT is many, many orders of magnitude higher than a subscription to something like Office 365 for something like 50 people.

"Normal" people don't use cloud services because they're lazy, they do it because the economics of rolling your own IT does not make sense, and hasn't since the days when it stopped being your only option.

Having your own It department doesn't mean you'll be fine for security. Plenty of health systems have their own IT department and have been hit.

But, even thinking of health care systems is thinking of big businesses. How does a road construction company justify an IT department or security team? Think of businesses like that. They have have an IT guy who manages services they use and is an expert at using those.

Most businesses are small to medium in size and non-tech.

I work in this area and it’s the opposite.

Small businesses with in house It get hacked waaaaasy more.