I am not sure how stringent the requirements are for most tech companies. For the ones I worked with, it would be probably fine to push for SaaS deployment or at most bring your own cloud. We used some tools that had complete access to repositories.

That said they were all startups with move fast mentality.

I am leaning towards #3 since we would use the same setup for SaaS and self-hosting but wanted to validate if that would be enough for people here.