For security-critical or sensitive situations, auditability should be a requirement. That implies access to source code and capabilty to build it.
Decisions like these need to be done from first principles. SharePoint shouldn't even have been a contender here if looked at seriously. Do your own homework.