Cloud accounting platforms secure the infrastructure, but firms still own the daily risk layer: users, permissions, devices, MFA, contractor governance, integrations, and offboarding.