@james said:
Well, the Cloudron app password should work for a normal login via the UI.
Good point. I'll take your word for it. I've got it set-up to not even show that any more.
My problem seems to stem from incorrectly thinking Nextcloud calendars and contacts use Push, but they use Fetch and the default schedule on Macs and iOS devices is 15 minutes.