Line 3 of the Umbrella Security disclosure:

Umbrel is marketed as something it is not - a secure personal server for Bitcoin and other sovereign apps. I guarantee nearly 100% of users would be shocked to find that Umbrel is not meant to be used "in production".

Embassy is secure and Start9 stands behind their product.

You can build the Embassy image yourself and install it on your own hardware for free.

Embassy has less features than Umbrel right now but it is a product you can trust.

Ethereum is testing financial products in production and blowing up people's money and private information. Umbrel is no different, except nothing has blown up... YET.