We treat security seriously, and this hasn't changed. Also, Prefect still uses the hybrid execution model for commercial products.
If you have any concrete security-related questions regarding Prefect Cloud, you may reach out to
security@prefect.io, but generally speaking, with any open-source packages, you need to be cautious in how you use them to ensure IT security - e.g., deploy only in a secure network, not expose credentials anywhere, etc.