Agreed. I know I'm taking it on faith that this implementation is robust and secure when it might not be. However, I feel okay about it knowing that it would be very difficult for anyone other than me to access this Docker instance in the first place. And if I'm outside my home network, I'm interacting with it via the VPN.