It’s FedRAMP authorized at the moderate baseline. That requires implementation of a pretty sizable and stringent set of security controls, continuous monitoring, and more. I’d say it’s probably a bit more secure than their commercial offering, but that likely depends on your opinion of the control catalog’s requirements and compliance does not always equal secure.