I probably should have mentioned this in my original post (will amend) but does it handle things like feature/merge requests kind of like how GitHub and GitLab does?
For that Gitlab is certainly the best option – or a private repository at Github. I'd trust their security much more than anything I could roll myself.