Really happy with Cloudron as well. Have been using it since 2022 for a small business and personally. They recently added community apps so now there is an official way for the community to add apps that are not yet officially supported. Really amazing product and pretty rock solid have migrated a complete Cloudron installation from one server to another a couple of times without issues.
cloudron has that elbow grease that only comes from years of running a project with an actual community of real users: a solid platform featureset like backups, DB management or mail sending, but also addressing niche apps' needs like .well-known or custom ports, UDP, server certificates available to the app and not just on platform frontend proxy layer
Of course it's tempting to reply "don't install random extensions". But a bigger point here is that browsers have grown so massively complex that it's almost impossible to build one, so we don't have an ecosystem where you can choose your browser for safety and I can choose mine for freedom. Of course, Google has had a big incentive and hand in making it this way.
For example, with the simplex method for linear programming, we don't do anything about disallowing the hard instances. We just solve the problems as they come in and none of the ones we get asked to solve ever turn out to be hard. (Generalizing, of course.)
