I'll admit, bit of a poor choice of word,l. But when you need to do e.g. physical security, costs add up quickly over what you'd spend on cloud in say a year, and the compliance companies are usually a huge headache to deal with so that'll be some nice amount of your staff's time lost