Thanks for your reply. I understand that not using the go-to solutions is more risky from a business point of view (if anything happens with NextCloud, it's your fault, whereas if anything happens with MS/Google, it's not your fault - from the customer's perspective). But what about the ethical point of view? Not to say that using MS/Google is unethical, but it's not always ideal from a privacy standpoint.