Your argument applies just as much to email, but it appears not to be a problem. Two reasons:
1. The legal protections and auditing are actually enough.
2. The companies hosting mail and code successfully have better security than most customers that would otherwise run those services in-house.
1. The legal protections and auditing are actually enough. 2. The companies hosting mail and code successfully have better security than most customers that would otherwise run those services in-house.