Security as in sending code to a random Datacenter, or security as in security holes? Because the latter has gotten a lot better with good workflows. The former is hard without self hosting