Is it secure enough to use it internally?

We will be sharing reports and dashboards containing sensitive data. I raise the question because the URL for Power BI is not inside company domain, even though company credentials are accepted and Power BI service is already part of the list of SharePoint services for company employee.