You could have caught it, even multiple times, while not experiencing symptoms. Meanwhile you did spread it to others unknowingly.

At first I thought why not just SQLite instead of a mariaDB, because as a self hoster you’ll probably have max 10 users on it anyway, is there a benefit to use mariaDB? Then noticed it’s not 1 but 3 seperate DBs ¯\_(ツ)_/¯

Why should storing your browser history and behaviour with a 3rd party in a 3rd country in a procured 3rd party cloud infra provider and a 3rd party colocation provider be the default? Why not keep that personal information just inside, instead of letting it leave out of the front door? Also, encryption has more to do with confidentiality than security. If someone gets access to your encrypted data all they have to do is encrypt it again, to do harm.