And when that box fails, you're looking at how long with no access? Longer than any AWS outage.
The IT guy walks in and replaces/restarts the box instead of waiting for the gods of AWS to descent to earth and restart theirs. They have direct control vs. waiting for something magic to happen.
If you buy hardware from HID Global / Assa Abloy the box never breaks.