The worst part of reading your list is that as I read through it I noted my own encounters with each of them, and then some:

* what do you mean who installs patches? I think our cloud provider does.

* (same, but for "firewall" or "policy")

* "I think they turn them off automatically if they're idle"

and so on. The "devops" hype has put people who think nothing of operations at all in charge of something they don't understand.