Am I being overly cautious here?

[ColHomer]

I recently started testing Apps within HexOS and installed a couple of curated apps where I noticed the process creates several public accessible storage shares as part of the install process. During my testing I switch to installing one of the apps through the TrueNAS interface instead and didn't see this behavior. Am I being overly cautious thinking that this is a pretty big security risk for when I move HexOS to being my production NAS? Should I be installing all apps through the TrueNAS interface if this continues to be a big concern for me? Thanks!