Cloud provides have security teams to secure their servers. But they are also big targets attracting a lot of skilled hackers. A cloud provider may have thousands of engineers, employees and contractors, each one of them can be an entry point for an attack (insider, hacked, social engineering, etc). There are more defensive tools, but the attack surface is also huge. We hear about breaches frequently.

A self hoster or an on-premise sysadmin may not be as well resourced or skilled, but they are just a fish in an ocean, and can lock down their servers according to their needs.

Is it more secure to self host (could be as simple as a homelab to an on-premise network) or rely on a cloud provider?