Do you control the backups/restores? Is SQL Server patched automatically if a service pack or security patch comes out? If so, and it causes issues with your application how do your roll it back?

I just do NOT like the thought of all of my data in the cloud where I have no idea if anyone else has access to it and I have no way of knowing this.