The 'we need control' argument
Most groups that cite 'control' actually mean 'we have not evaluated cloud security posture'. Reputable cloud vendors invest more in security than any single group can. Exceptions exist — defense, some healthcare, some government.