A caveat to the cost and expertise aspect: in Europe (or in France at least) for security reasons a company must have the servers secured for all data and authentification, which means any company that’s big enough will have its own Microsoft server infrastructure. It takes a big team with this specific expertise to run this infrastructure.