as I'm seeing more and more posts about people fearing self-hosting - and I can understand that if the responsibility of keeping things secure stresses you out, especially with the recent security patches - there's something you should probably know about that, that's maybe not quite obvious:
if you believe that you couldn't possibly reach the level of security of a professional operator, *don't*.
I have seen behind a lot of curtains. the professional/commercial operators of services have, on average, horrible security. they don't keep their software up-to-date, they dismiss legitimate security concerns, and they downplay or outright hide breaches. this applies to small and large operators alike, even big tech companies.
while there are some exceptions, the concept of "professionally run by security experts" in most cases just doesn't really exist outside of the marketing department. even in those companies which claim to be security-conscious! the security department is virtually always the first department to get cut, and if it exists at all they rarely have sufficient jurisdiction within the company to do their job properly.
so, I can entirely understand if you don't want the stress of hosting services and keeping them available and secure, it is genuinely a responsibility you take on towards others. but don't fear it out of the idea that you couldn't possibly meet the bar that commercial operators do, because they don't either, and they're usually running the same software that you do!
#selfhosting