The fact that one must use a public CA and cloud server rises the opposite fear in highly critical clinical applications, where the server is internal and all external access is blocked by firewals for security reasons. Being forced to use a public certification and a public server is just the opposite of a secure environment - public servers in non-compliant countries such as the the US make it worse.