The requirement for connected network topology is a non-starter for many SaaS products. I don't want my systems to be open to some backchannel communication from the SaaS providers service.

That seems like a bit of an arbitrary line to draw, no? Would you say the same about webhooks?