It's here too that without some rigour and vigilance the beast can get fed on the sly. It is great to see folk depopulating BIgTech for small companies providing managed alternatives, a fine start, but don't get cosy until you know who they themselves host with.
Ask them "where will my data be stored?". Make them say it
Some, many, are hosting on AWS, for instance. So when you move to their shiny new free and open source alternative to toxic tech, you've left the cell but you're still in jail.