I'd recommend you look at getting the deal with the Service Provider, as the possibility of having security misconfigurations on your own WordPress instance is far higher. Going with a service provider restricts the amount of things one can configure (or misconfigure!) Feel free to reach out to me if you need more input on this topic :)