A properly designed cloud service could preserve the user's security. But I agree, trusting others to do that is a bit of a stretch.