You're dead wrong Alex.
Large targets are always harder to defend, and easier to take out... because, if you had read the article, you'd know that there is no defense against a military onslaught; only damage control.
A cloud provider must have many entry points... that's what their business is about after all.
They also can't very well limit what apps their clients run, since that is also what their business is about.
On your local network, the machines only have the means of linking up that you provide them with... even military malware cannot create network capability where there is none. That's the final line of defense, pull the router, and with a cloud solution you don't have that.
And on a cloud solution, someone can actually take over your data with out even moving it off site.
