Batsirai

[strong dome]

Checkout is Stripe-hosted, so you there's virtually no concern for misconfiguring it and accidentally creating an attack surface for bad actors.

Realistically, they can both have the same level of security. It's just that Stripe Elements requires you to do a little bit of extra security work on your end, instead of relying on Stripe to do it for you