It is dockerized but that doesn’t really matter since the DB which is probably one of the most private things on your server is also stored in the container. So a hacker who got into the container can steal your timelinize DB

Your best bet is running this LAN-only but that kind of destroys the whole point of it. This thing should never be connected to the internet