Is Palo Alto Networks Cloud CNAPP worth the premium over open-source alternatives?

Just saw Palo Alto's Prisma Cloud pricing again. It's... significant. 😳

For a mid-sized SaaS team like ours, I'm wondering if the premium is justified. We've cobbled together open-source tools for CSPM, vulnerability scanning, and IaC security. It works, but it's a time sink to manage and correlate everything.

Specifically, does the unified CNAPP view, the built-in compliance, and the runtime protection actually save enough engineering hours and reduce enough risk to offset the cost? Or are we better off investing those dollars into building out our own integrated platform with, say, Terrascan, Trivy, and Open Policy Agent?

Would love to hear from teams who've made the switch either way. What was the real tipping point?