Most businesses need a lot more than dumb storage from their IT systems though...

As soon as you start using the full suite of cloud tools, it's impossible to not give the provider the encryption key...

I see what you mean. If those 'value additions' can work on metadata, the separation of data and metadata might help some, but that will become complex very quickly.