Give it a few years and then on-prem hardware and simple server hosting will become fashionable again.
When everything was local and private, the attacker could only access a specific device or network, even if the security was often very weak. Now a single attack on a centralized entity has such a big payoff, that it makes if viable to allocate much bigger resources by attackers.
What we see, instead, is what happens to poorly democratized and incentivized systems.
Now I have apps where I need 15 minutes of maintenance a year, install and configuration takes 5 minutes.
Some cloud providers have amazing stuff, but I feel they all start to bloat and I don't have use cases that need whole clusters.
Also even for softwares deployed on on-prem hardware, big orgs will still need single sign on, which will still be open to these kind of attacks.
There is a best of both worlds in there and I think we've gotten where we are now because of cloud providers marketing themselves suitable for everyone.
There are multiple analysis of that breach available. Pick one.
Here’s a starter.
Maybe “on prem” but largely managed by someone else, which is already a thing.
[edit] to editorialize, I also think ~everyone is going to get this very wrong. I think doing this stuff such that you don’t grind productivity to a halt but also don’t have mile-wide vulnerabilities is goddamn near an Apollo Program level of difficult, and basically nobody is treating it that way (and a lot of them would probably sooner abandon their grand mass-data-total-control plans if they had to treat it that way—which is exactly what I think most of them should do, but execs just love the idea of perfect legibility of data and processes end to end on their phone or whatever, even if it’s in-fact just a money-wasting and risk-generating fantasy for most companies)
[1] https://www.researchgate.net/figure/Yearly-cost-difference-o...
My current employer handles things where internal service at the org are on-prem while customer facing services are cloud. Even the cloud stuff backs up to an on-prem storage system (though it also gets backed up to an off-site S3 provider).
You could operate an on premise bakery but most companies just order donuts.
https://techcrunch.com/2019/06/21/three-years-after-moving-o...
Or is this the discussion of having a team of SysOps vs a team of Cloud Engineers?