(Also, as concerns the "cloud" discussion: yes, in the grand scheme of things they're no more or less inherently vulnerable than any Internet-facing system. But, as you say, they're a high-value target - and more importantly, they're a high-value target that a disconcertingly large number of people seem to think of as the next Future Of All Computing Forever and also as some kind of ethereal digital fairyland removed across a rainbow bridge from the actual real world of Internet-facing servers with their own potential vulnerabilities, where as much data as possible should be kept, simultaneously safe forever and readily available from everywhere, secured by the magical Cloud Pixies. The whole thing would be a lot less unsettling if most of the people stumping for it gave any indication that they understood what it is, how it works, or what the potential risks are.)