It turns out relying on KVM is equally risky these days. (Though it could be Firecracker related specifically, but there are no public details as of now)
https://cybersecuritynews.com/kvm-zero-day-vm-escape
@MiroTalk would you like to test this package to see if this works as intended with MiroTalk? https://git.due.ren/andreas/rustdesk-server-cloudron/-/raw/main/CloudronVersions.json
I moved most of my apps to on-premise servers and kept a handful on a Hetzner VPS to keep costs down. I'm using SFF computers like the HP Elitedesk 800 G3 Mini (under $100 on eBay nowadays) and it's a solid machine for hosting. Older ram like DDR3/DDR4 are easier to find/buy too.