LLM self-hosting

Is self-hosting an LLM worth it for compliance?

I'm considering self-hosting an LLM because data location and access are becoming compliance concerns. How do people weigh that against model quality, hardware requirements, and prompt injection risk?