Hope you've properly secured it, because if not, everyone will have access to your data and metadata.
You would get way more than 20 GB.
But I have in fact also left my nextcloud on the web. I'm not that worried.
Just have to stay informed on any big vulns, and I also stay as many releases as I can behind the bleeding edge. That helped me avoid the recent fidokey issue.