With a few exceptions for companies with highly secretive data, you do have to be a government agency or working in a highly regulated government-adjacent area for secured private clouds to be a requirement carved in stone and therefore worth investing a ton of extra money into though.
Neither approaches the secrecy needed by government installations. Health care and banking leak PII regularly and never really suffer any consequences.
i'll add that on-prem is getting 10-100x easier than it was 10-20 years ago (still very hard), and "i want to run this in my own datacenter" is becoming accessible to much smaller companies than just F500 enterprises
You don't have to be a government agency to not want your company's data all over the place.