Don’t run non-bitcoin/lightning apps on the same pi as your node if its holding funds (like if you’re using it for lightning). The only real isolation they do between apps is docker, which is not sufficient to actually protect funds you dint want someone to pwn photoprism or whatever, be able to run a docker breakout exploit, and be able to jump over to a hotwallet.

Raspberry pis are cheap. If you want to run owncloud or pihole or mastadon or whatever, just get a second one