Contrary to common belief, public clouds are not highly secure by design, and so require additional protection.