[t-writescode]

That is correct, yes.

[teekert]

It sounds a bit like using the same password for all your services... Hack a Nextcloud instance, gain root on any system through Docker,

[apitman]

I would assume (hope) that the AIO container itself is not exposed to the internet, only some of the containers it starts.