I am a bit concerned about how Matomo deals with security. All their PHP code is located in the public folder and they use nginx[1] rules to block access to scr

I am a bit concerned about how Matomo deals with security. All their PHP code is located in the public folder and they use nginx[1] rules to block access to scripts that are dangerous. [1] https://github.com/matomo-org/matomo-nginx/blob/master/sites-available/matomo.conf#L36 https://github.com/matomo-org/matomo-nginx/blob/master/sites...