Security risk minimization if one is infiltrated the others remain online

Its docker based on start9 but then again its running on the same underlying hardware.

Hence nextcloud should run on its own server and not the same where your lightning is running for example.