I disagree with your statement simply because I myself started my tech career in the midst of the Cloud First hype cycle, and even then principles around data management and limiting access (eg. via RBAC) was already well understood.

Maybe a significant portion of the HN base simply never worked with companies that either sold to or were a part of regulated industries, but I do not buy that.

Furthermore, all of the design patterns I am describing can and have be implemented within cloud environments as well.