I think both cases pose similar risk from security standpoint. I'm not perfect, they aren't either. There's a lot of nuance about attack surface, available tech/resources, effort of average employee vs mine etc. But all in all let's call it roughly equal.

I just prefer to host by myself and I think it's perfectly reasonable alternative. Far from "utterly insane".