Does the security zone package is included by default in Campaign Classic or this functionality is getting removed as we move to cloud from instances? Or do we need to get the Security Zone Package installed explicitly every time?
It depends entirely on what build version your instance of ACC is on. Moving from a physical to cloud instance doesn't matter. As long as you are on a newer version of Adobe Campaign, the Security Zone package should be available.