The world is ass-backwards

They run Linux on the server

But Windows on their end-client

You're supposed to be able to verify and trust your local computer, while the cloud is hostile and unknown. What does it matter if the cloud is open source, if the other guy is running it?