How much longer does it take N self-hosted instances to be patched compared to a single multi-tenant instance? How much effort is duplicated analyzing and securing self-hosted installations?
Of course it is very vulnerable to evil maids' attacks.
Point being, most hacks are not related to credential compromises.