Indeed. And on-prem, the most valuable experience we could already have from the FB issue:
avoid inter-dependencies (Facebook DNS was in their own network that failed, their physical access was also depending on this network)
get OOB management to avoid any lock-in
Granting all the info I heard were correct. But still good advice anyway 😄