“For small and medium companies, I generally recommend cloud services, because they don't have the people or the skills to run their own systems as securely,” Bellovin said. “But there are real but imponderable risks to one company controlling so much of the net.”