To go a step further, the reason it's often impossible to add a new vendor if that you've signed a bunch of contracts with your customers saying you're not going to send their data to other vendors in all sorts of various flavors.
And the pain of the procurement process, specially when you follow a certification such as iso27001, soc2 or similar.