A maintenance window for an on-prem system can look like a service problem from the hosting provider. Security can be difficult in this scenario, especially for multi-tenant arrangements, but there are models that work for this.