Because it isn't the case. For good reason. So it isn't acceptable. Spend some educating yourself about security standards like FedRAMP and build a mental model of things that are or have been true, and the reasons they were made so.