[sterlind]

This is the rationale between sovereign clouds like Azure Germany, I think. In that case Microsoft provides the software and design, but the whole cloud is operated by EU citizens and no Americans have direct access. The idea being that Microsoft couldn't be compelled to hand over data because it has no access. I'm sure AWS (and maybe GCP) have such things by now.

Disclaimer: I work in Azure but not on this, so my info may be wrong.