I have not noticed the permissions issue either. I have 2 main CDVR servers on 2 x M4 Mac Minis both running latest Sequoia releases. I manually update when new macos releases are issued to keep current and I do not recall seeing any permission prompts since the original install.
CDVR is installed on the internal nvme drive while the database, recording, etc is done on an external thunderbolt attached nvme drive. I have a cron job that copies everything from the external nvme drive to an external hard drive. The external hard drive is setup as a 2nd storage path for CDVR. I have another job that will delete any recordings on the external nvme drive if they are older than 5 days since it is limited on space. With the external hard drive setup as a 2nd storage path, CDVR still sees the recordings but if older than 5 days it comes from the hard drive. I use Time Machine to protect the Mac mini internal drive and then I have another rsync process that clones my external hard drive to a secondary external hard drive. As you may notice, I don't like it when something fails and I can't recover. Or maybe I should say my wife doesn't like when something fails and I can't recover 
I have been very happy with the performance and stability since I moved to these Mac minis last fall. Prior these were running as docker containers on linux vm's running in Proxmox. Very stable running as linux docker container as well but definitely not as snappy as the Mac minis. The nesting of docker on linux vm's on Proxmox physical servers was just adding too much latency which I was not happy with. The Mac mini setup is killer IMO if you want the best experience. Yeah I go overboard with redundancy and protection but that comes from 40+ years in IT seeing just about every kind of failure 
Edit: I have no problem paying extra $$$'s to get good stable performance and a happy wife! I am not suggesting anyone needs to go as robust as I do but do make sure you think of failure points in your setup. Think ahead and know what you will do "when" you find yourself with a failed drive because it will happen eventually.