Absolutely agree. It's a disaster waiting to happen. I don't know about security, but the groups working on the "cloud" have no technical idea what they are doing.
I left the cloud area a year and a half ago. I was appalled. It's just an unbelievable mess.
I was working with a group that had been working with ADF and the application server environment FOR YEARS and they had no idea how to do anything. The app server is a huge mess/mix of crap. They kept having problems with the wrong functions called from the wrong versions of the jar files in the server.
Talk to the manager and he wants them to just workaround the problem cause he hates the other managers and they hate him. There is no cooperation between groups at all. No one can speak to anyone in another group without the manager's permission. Try to tell that to the management above and they are completely CLUELESS and they don't want to "get involved".
There was a new version of a jar file that was needed to be replaced and I advocated for that to be done correctly all the way around. I was overruled by the "management" because they didn't want to say to anyone above them that there was a problem that needed to be dealt with. So, they just shoved the other version in there, crossed their fingers and prayed.
While I can't say anything about security, the environment is intensely dysfunctional. It's unbelievable. If you are an engineer in the "cloud", be sure that if anything goes wrong, it's not the narcissistic manager you work for that will get the blame..... it will be you... no matter what you warned them about..... it will the engineer that gets the blame.
You can't trust anything. If you are a customer who currently uses oracle tools, you already know what a mess that is. The "cloud" is a thousand times worse. A lot of the management that brought you the crap tools is working on the crap cloud.
Customer beware.