Yes. It depends on your threat model. You have to just someone at some point of you're not running your own datacentres.