Building your own carries it's own set of risks. I can't afford the infosec, IT, devops, etc. that a large tech company has. Sure if I build my own and get hacked, I may have more ability to directly effect the situation, but I will likely have to spend much more of my time wrangling tech and may end up being more likely to be hacked overall.