Using an external favicon service is leaky: That service will get a hit for each URL in the bookmarks and may leak company internals.
Ultimately, it depends on the instance of a bookmark-source which favicon service to use. This would allow a usage of an internal service, avoiding external leaks but still leave the option for external services as a fallback.