I use calibre-web, but I host it accessible only to my home network, so I'm less concerned about unacknowledged CVEs. I do find that the upload feature is decent, but I miss the calibre plugins. I find my workflow is to use calibre on a laptop as the way I write the database and use calibre-web as a way to browse and read it.