Hacker News Reader

> You have someone else to point the SOC2/HIPAA/etc auditors at.

I would assume you still need to point auditors to your software in any case

You do, which makes it very nice to not have to answer questions about the physical security of your servers.