I am already using noVnc.
My concern is security. I feel like the browser should run in a virtualbox of some sort but nothing too heavy...docker/
any insight would be helpful.