Loading: The cloud’s weakest security links aren’t where you're looking