The cloud providers can afford to hire and train elite teams to handle security. I remember seeing a post about a guy trying to break out of the docker container used by Cloud SQL on GCP, and apparently the GCP admins made it known that he was being watched pretty early on. I believe the issue was patched fairly quickly too.
It's possible that <Random F500 Co> has a great security team. But it's also possible that <Other F500 Co> doesn't.
It's possible that <Random F500 Co> has a great security team. But it's also possible that <Other F500 Co> doesn't.