You are correct, it seems to have supported it for a while now, but it got more support now.

I’m afraid MusicBee is not for me since my household has been powered by Linux only for years now. I’ll look into that beets plugin though, which has been recommended to me somewhere in the comments before. Thanks!

You patched the annoying “crash-on-start” bug! 😍 I was collecting diagnostics to help nail it down, but you guys were faster. Keep up the great work! 👍👍👍

Thanks for your detailed reply!

To make that happen, the attacker must […] already have access to the server to upload and process the file, which means that security has already failed.

Do I correctly assume that by axis you mean shell or even root level access? If not, any of my regular users (turned rogue…) could upload a poisoned raw file which nextcloud would process to, for instance, generate a thumbnail.