Working in the cloud is only as secure as the person working with it. Any employee can click on a wrong link. And if your service is not sufficiently protected (for example by MFA), a cyber breach is lurking.