I think it has to depend on the amount of participation the serve is going to be participating in the process. In some cases, one may find that they tend to implement 3rd party platforms on their service so the amount of activities is limited to marketing and displaying products.
One thing that's certain is that security cannot be left to chance. Other than that it should only depend on what you will be doing on it I guess... I hope it helps.