Yes I get it. Umbrel should make sure setup pages are completed, and disable services after x mins. Not blaming Umbrel or anything. It's just a lesson that can be learned from.

Replies (2)

I don't know if Umbrel is fully to blame here as they provide mechanisms of defense such as requiring authentication in umbrel to access certain apps but also providing variables that apps can use for situations like these like ${APP_PASSWORD}, for example.