I'd never consider this until I could self-host. Way too much regulatory "scaries" when dealing with money.

Remember that admin permission clearing command accidentally committed in Production last year that killed hundreds of SFDC orgs last year?

What I'd do to listen to that bridge call..