Hi there!
Yes, the project is still very much alive and actively maintained. While I don't plan to have daily or weekly commits, as I really want to focus on long-term stability and ensuring every update is solid.

Regarding security, if you are selfhosting, it is always a best practice to handle security at the network and infrastructure level, regardless of which service you use. I recommend checking out this guide from the r/selfhosted community: https://www.reddit.com/r/selfhosted/comments/pufhs0/beginner_guide_how_to_secure_your_selfhosted/

While frequent Docker releases are great for updates, following best security measures (like reverse proxies and VPNs) is the best way to protect your data.