Can LAN Crypt Clients be switched from on-prem managed to cloud-managed and vice versa?

Yes. The very same LAN Crypt client can either be managed by conpal Cloud Admin or on-prem LAN Crypt Admin. Some clients even support re-configuration during runtime (mobile apps), others require re-configuration/re-installation of the client (desktop clients).