Cybersecurity Savant | Helped the Government of India & Government of Thailand Secure Their Cyber Infrastructure | CISSP & CCSP Certified (781238) | IT & Security Strategy Specialist
I'd recommend you look at getting the deal with the Service Provider, as the possibility of having security misconfigurations on your own WordPress instance is far higher.
Going with a service provider restricts the amount of things one can configure (or misconfigure!)
Feel free to reach out to me if you need more input on this topic :)