Some of them are solved by using managed-services that abstract away the messy config / security ops stuff.

The blog entry was wordy and repetitive for what it expressed (AI?), but the cloud argument should boil down to a few simple questions:

   - Does it get you regulatory certifications you need?
   - Do you need to rapidly scale-up / scale-down?
   - Can you afford to hire the (minimal) necessary skills to self-administer servers?
   - Can you stay on top of security updates?

   - Regulated companies who want to punt on certs/attestations
   - Small/medium growth-oriented startups (unknown needs, low headcount, focus on building product)
   - Companies with hardware demand volatility that exceeds their ability to provision it