Self-hosting is slightly better as you are not creating a honeypot. But it’s not inherently more secure against client-side attacks (browser extensions, mobile

Self-hosting is slightly better as you are not creating a honeypot. But it’s not inherently more secure against client-side attacks (browser extensions, mobile apps), and adds its own attack vectors (put a contaminated version on DockerHub). I still self-host.