10Gbps is one "teen with a stolen credit card" DDoS event away from being unusable. If you're running a big service that someone may dislike, that's really not enough.
With the cloud, that DDoS can bankrupt you by causing you unconstrained bills instead.