Thats a good idea for any government and major org.

Data sovereignty is such a massively huge issue. But when some nameless market-droid can go "pay us more in 10 days or we purge everything", or "account disabled" - those can absolutely wreck an org.

Now, non-critical stuff happens. And use 3rd party services for those. The key there is cancellation isn't a big deal. But the moment they do turn critical, replicate in-house.

Also, keep in mind that the AP reported killing Hague's ICC contracts. Lots of misinformation, but this is the starting point.

https://www.politico.eu/article/microsoft-did-not-cut-servic...