Cloud attach vs. cloud only: the debate

I have made a point of referring to on-prem AD as Legacy in terms of workstations and GPOs have a ton of baggage, especially when changing local administrator security groups since there is almost always a GPO that will conflict with the OMA-URI for that.