Nextcloud is written in PHP an so many people believe it to be insecure per default, but the devs are highly capable and put an emphasis on security from my experience.