Just tested Alby, it works great but the magic hides the truth. It must use an external server to work as well, NWC use alby servers as relay and when there is an external connection I'm wondering what can be accessed externally.

Like, where the limits happen, is there any slight risk that a vulnerability allows to use your alby account to bypass the limits and drain your node, or is it really secured as long as access to the local network where Alby run is not reached by a hacker?