you would realise security even without the cloud is critical to protecting systems

Wazuh, the software I specifically called out. Is not "cloud". They offer a cloud service, yes (that's how they make money, on lazy admins or orgs that are too small to house their own infra). But it is self-hosted and designed to be run within the network.

You clearly have no idea what the current security market looks like. Nor what half of the terms you use actually mean.

Edit: Forgot to address this too

Virtualising every single system endpoint is practically impossible, which Wazuh seems to rely on.

No. The agent can be installed on ANY system. They recommend you install the orchestration/control node virtualized, which you don't have to do. You can install it on a raw system though that would be a huge waste of resources. You seem to have missed that.