> businesses mostly don't want to deal with installing software across their systems

And now they have to deal with cloud leaks of sensitive data that they no longer control and various SOC2/ISO "certifications" increasingly look like security theater and a "feel good" measure because they don't guarantee anything.