Yes, working through a third-party cloud is not ideal, but I have not seen anything that matches the price/simplicity and is self-hosted.

Regarding security, I don’t have it so I can’t confirm it 100%, but it’s not supposed to override the traditional key or block the handle, so you shouldn’t have that problem.