Back in March, the folks at @7ASecurity performed an audit of #Incus. The details and report are now publicly available!
https://discuss.linuxcontainers.org/t/incus-publishes-independent-security-audit-by-7asecurity/27211