Am I right, that a collabora server as a backend for multiple nextcloud installations is not a security risk as there is no way, that a user from nextcloud A can see a document from nextcloud B? Opinions?
Yes, as far as I understand each Nextcloud would initiate a document edit session with its own document URL and token exchange, so those should be isolated from one another.