A corporation implements a mobile device policy on smartphones that utilizes a white list for allowed applications. Recently, the security administrator notices that a consumer cloud based storage…

Consumer cloud storage is designed to sync files to the cloud provider's servers, not to maintain additional local copies on the device - the primary risk is the external cloud exposure, not local storage accumulation.

Consumer cloud storage applications sync files between the device and external servers outside corporate control, providing an easy path for users to intentionally or accidentally upload sensitive corporate data (exfiltration) and to download harmful or untrusted files from shared cloud storage back onto the corporate device (malware introduction), making this a DLP and malware risk simultaneously.

Cloud storage apps provide file synchronization functionality, not application installation - downloading executables or apps is the function of app stores, not cloud storage clients.

Data remnants on the device after deprovisioning are a concern but represent a lesser and less immediate risk than the active, ongoing exfiltration and import threat that cloud storage creates while the device is in use.