Comment by stickfigure

Use a PaaS like Heroku or Google App Engine, with builds deployed from CI. All the infrastructure-level attack surface is defended by professionals who at least have a fighting chance.

I feel reasonably competent at defending my code from attackers. The stuff that runs underneath it, no way.