Saas - Security

SaaS applications are prone to attack because everything is sent over the internet
Data encryption and decryption
Communication protocols
Virtualization versus Multi-tenant architecture: which one is better in terms of the security?
Transaction processing, networking issues