The same can be said for any commercial offering that you entrust data to. By that metric only fully self managed open source verified hardware is acceptable, right?
To be fair, that is a coherent, defensible stance to take. There are multiple reasons to go self-hosted, and "I don't trust companies not to screw me over" is definitely one.