Without hiring/being a cloud expert, it's hard to be sure that you didn't leave some door wide open due to a configuration error. Both approaches offer more than enough opportunities to royally screw up.