Oracle is now doing it's own security surveys.
"As many organizations migrate to cloud services, it is critical that their business and security objectives align, and that they establish rigorous controls of their own, versus solely relying on the cyber security measures provided by the cloud vendor."
That's it, put the customer in charge of security. Just a matter of shifting the blame where it belongs!
Pay no attention to the cloud behind the curtain.