It is more than enough security features for hosting your own apps, especially if you access them through something like tailscale.

But part of the whole point of Sandstorm and its ilk was that we could have so much better security. Sandboxing all the services really is better than what we're getting now.