If you can afford to not expose it to the internet obviously you are going to have better security. But this is not always desirable talking about wiki software.

I can't disagree with you. But you can either deny that the average Saas is more secure than a forgot Confluence internal servers exposed to the internet