I’d almost say your exposure is bigger in the cloud. WAY more software involved, it’s shared environment, and someone elses computer… In addition, it’s complex to properly setup. People often leave it alone once they get it working, no security test or checks.

Even IF it was because it was hosted at home, I blame the companies who build this shit. Market to end users, “super easy to use!!” But no security by default? Nuts.

Enable auto updates, randomly generated admin password (no defaults like 123456), and support for more then 3 years will go a LONG way for the average consumer.