All government systems should be on-prem, and secured by proper personnel. None of the data should be in a cloud providers hands, even by their own country's providers. There needs to be a separation between business and government infrastructure.