I'm curious too. Nextcloud seems to take a lot of security concerns into consideration: https://scan.nextcloud.com . Though there are still going to be server specific security issues Nextcloud won't be able to scan for (outdated packages, firewall configs, etc), not sure what's considered more secure except something offline?