Nice and helpful article.

Cloudflare is a kinda funny choice to pick to trust, and maybe they'll re-evaluate that soon.

GitLab is overall nice, and I recommended their on-prem product a few years ago, at an AI hardware tech startup with unusual security requirements. Today, I'd still consider GitLab, but I'd first evaluate how Forgejo fits requirements.