Really could not agree more. It will become more and more necessary to have tools that can audit use of Clouds by applications.
During one of our evaluations of a Cloud service, a Cloud vendor actually told me "control is not security". To someone who is personally responsible for the security of sensitive or personal data, an absence of control is not a terribly compelling argument.
There is a tremendous need for real visibility and control of where data goes. This is contrary to many of the principles of Cloud computing.
In the near term the only solution is an ability to host Cloud server products internally and have auditable products reviewed against real security requirements on a regular basis. The cost of installing and managing such a solution internally is certainly much higher than subscribing to a Cloud service. But the very real risk of passing sensitive data through outside data centers is much too great - even with encryption and other measures.
I think it is completely safe to say that Clouds offer a great deal of convenience at the cost of a great deal of security. Cloud security is really almost completely in the hands of the subscribers.