How scan.nextcloud.com works?
How does this tool find your Nextcloud version?
The fact that Nextcloud version can be known without authentication is a security issue, right?
Does Nextcloud keep data after a website is scanned?
@jospoortvliet can give you the nitty gritty, but no it should not be a security risk that the version number is not hidden, and yes the result is cached.