Loading: 'Cloud only' policies are as bad as 'no cloud' ones