The latest report from CloudBees is bad news for the cloud industry, with many companies still not fully securing their supply chain.