Re:Ask HN: If your company cares about security, why does it...
by KekDemaga on Wednesday June 28, 2017 @01:11PM
(#14655986)
I agree the answer is shades of gray. Personally I prefer self host because I am able to get more visibility on my threat model that way. If you aren't equipped to use that information then I see little benefit to it.
If you use a service, you're outsourcing your security to perhaps more competent people, but you're making yourself a larger target.
Self-hosting makes you a smaller target, but you're taking all the risk on yourself.
Neither is a panacea.