The installation workflow begs for supply-chain exploits. Given this and its oob install, it probably breaks iso27002 as well.

I’ll wait. NextCloud and OwnCloud both have 27002-compliant installs (the latter next some review), so I need to stick with those.