Good point, though I'd say the major factor is dealing with hardware, not necessarily being regulated. You can't just push a hotfix to a million of on-premise devices with one click.