I’m not one of those ‘OS or die folks, and I’m willing to change my mind about Zoom — once they become HIPAA compliant. “In the cloud” doesn’t just mean someone else’s computers/storage, it means someone else dealing with security and maintenance. HIPAA seems a decent proxy for a company taking that seriously enough to be used by an enterprise.
As a friend of mine, who manages a team at a large cloud provider: “We try to make things work for our clients so, to them, it seems like magic. My concerns are for when it becomes not-magic”. He’s, um… busy these days.