Typically the answer for this is somewhere in the mix of: - paid support availability - trusting a third-party audited codebase vs a third-party unaudited git

Typically the answer for this is somewhere in the mix of: - paid support availability - trusting a third-party audited codebase vs a third-party unaudited github repo - having to pay someone for their time to manage self-hosted services