All of this is true both for dedicated servers and cloud-hosted VMs.

This list looks like FUD, to be honest, trying to scare people. Yes, you should be scared of these things, but none of them are magically solved by hosting your stuff in AWS/Azure/Google or any other could provider du jour.

Some of them are solved by using managed-services that abstract away the messy config / security ops stuff.

The blog entry was wordy and repetitive for what it expressed (AI?), but the cloud argument should boil down to a few simple questions:

   - Does it get you regulatory certifications you need?
   - Do you need to rapidly scale-up / scale-down?
   - Can you afford to hire the (minimal) necessary skills to self-administer servers?
   - Can you stay on top of security updates?

   - Regulated companies who want to punt on certs/attestations
   - Small/medium growth-oriented startups (unknown needs, low headcount, focus on building product)
   - Companies with hardware demand volatility that exceeds their ability to provision it