I suppose that many/most who do are not too knowledgeable at the CLI level. Do you have reason to suspect malware or malintent on the part of Umbrel?
Discussion
Nothing intentional. And it's been over a year since their major security incident.
But often seeing people have issues with LND in that setup. Without people having familiarity of the command line and docker it makes diagnosis a challenge.