Is Home Assistant's Open Source Cloud Service Secure?

You don’t, or use a VPN. I have a VPN set up and hardly ever use it to access HA, so it isn’t really needed IMO if you have your automations and other things in HA properly set up.