You nailed it.

I've always been against "the cloud" for precisely these reasons.

I've considered offering "de-clouding" services over the last year i.e. move your stuff to internal services and moving to a managed model i.e. I'll manage your internal systems remotely.