Security effort scales with number of servers only if you’re doing something deeply wrong (like not using configuration management).
A big part of security is your relationship with the people providing you hosting.
The compromises to nordvpn and others came from a rogue hosting company, for instance.