Just about every centralized service will be breached at some point. At least they have a cybersecurity team and everybody got notified and can act accordingly. If you choose another just because they haven’t been hacked, it’s just a matter of time. I think they’re still a viable option, just be ready to react to notices like these.

Personally, I chose the self-hosted route, but that comes at the cost of maybe never knowing if you get breached until its too late.