I don't think it is an issue, however essentially the more restrictive setting (Cloudron or app) will hit first. Looking at the changes at vaultwarden, their defaults are a lot more restrictive than the ones we have set in iptables as a generic default.
I also think this makes much sense. Some apps may require more stringent measures others don't. So while having a basic line of defense from the platform, the apps can add on top where applicable, since only they know which routes to protect more and which are for example just public routes which just have to be prevented from a denial of service attack.
According to this Paperless-NG doc page, there's an app for iOS called QuickScan which lets you take a picture of your document and have it saved to "your favorite location". I just tried the app and I like it so far. I'm trying to connect it to my NextCloud via WebDav but my credentials aren't working. Do I need a specific plugin for Nextcloud or something?
Below is a screenshot of the app's integration options.
@jagan I think in your case, the issue was with the google external storage primarily. I think there is a general issue with plugins where whenever nextcloud updates they are slow to catch up and something fails.