> Azure is by far the one whose security bugs I hear most about.

Only* about. GCP and AWS haven't had cross-tenant security bugs, meanwhile Azure have had multiple, and trivial ones to boot. If a multitenant service can have such poor security, it's doubtful internal only stuff is any better.