Traditional server-based self-hosting will have lower average uptime, will be easier to attack, and will have a much higher chance of disappearing out of nowhere (bus factor event, or for any other reason).

It’s not a single point of failure at least but if your particular project is targeted then yeah. I was thinking more about using it for private repos, where it isn’t public at all but that’s a separate case.