WAF Coverage Is Alarmingly Inconsistent: Over half of cloud assets and nearly two-thirds of non-cloud assets at Global 2000 enterprises lack WAF protection, leaving critical systems exposed.