I think the granularity of control is just as important as where the app is hosted imo. Its perfectly valid to make a fair compromise on ease of management vs. being able to vendor your own versions. And especially with how great Tailscale/Wireguard networking is nowadays, you really can make that line blur between your own network + a cloud provider.