Why do non-privileged users have unrestricted access to to the directory tree of an external storage drive attached to the Nextcloud AIO Docker container?
That’s entirely under the control of your External Storage configuration. Check Admin settings->External Storage and Personal settings->External Storage.