Why law firms should and shouldn't use public cloud