TBH, it's easy to set up a hidden service. You can copy-paste commands from a tutorial to install a web server + PHP + MySQL, then install Tor and uncomment a couple lines in torrc. You can be up and running with a hidden service in under 10 minutes. It's much harder to set up a *secure* hidden service.