> [it's fine to expose your services to the Internet, there will be] no consequences.

> and then Okta, which should be pinnacle of security gets hacked and has issues with disclosure.

Pick one. If even the "big boys" can't protect themselves, why do you believe you can?

I think both cases pose similar risk from security standpoint. I'm not perfect, they aren't either. There's a lot of nuance about attack surface, available tech/resources, effort of average employee vs mine etc. But all in all let's call it roughly equal.

I just prefer to host by myself and I think it's perfectly reasonable alternative. Far from "utterly insane".