[youseecomrade]

I would be even more worried about DNS/domain hijacking if the HN stories I hear are true. Not only technical issues but social engineering of the domain ownership.

Whatever you do (custom domain or not), you're always exposed.

[cerberusss]

Yeah but I don't really know what to do about that, except for using a domain provider with 2FA.

And of course you're always exposed, I'm not sure why you'd mention that. It's no reason to just give up and do nothing.