@Takuya-Omi pretty much nailed it here.  I work heavily with Health and Life Sciences customers which is another highly-regulated industry that requires much tighter control on the network and security layers as well as the forensic audit capabilities of classic compute in the event of any security incident.  Serverless "black-boxes" a lot of things to make it easier for customers to use, but at the cost of decreased visibility and control.