source: https://www.afp.gov.au/news-centre/media-release/two-wa-men-charged-following-afp-fbi-wapf-disruption-alleged-global

Most self-hosting security advice is just about the basics - don't expose ports directly to the internet and use containers for basic isolation

Beyond that what level of security do you actually enforce? Do you monitor what your apps are doing in the background, like tracking outbound network traffic or checking file access on the host? When updating, do you just let it auto-pull or read the release notes for breaking changes or inspect source code and dependencies before updating?