Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

Newsflash; nation state, or state sponsored hackers will gain access one way or another. The vector here just happens to be Sharepoint, but could've easily been something else, like a good old social engineering attack.

Reducing the attack surface by not using cloud services would still help.