The underlying image should be updated, at the very minimum whenever an update nextcloud is released and preferably more regularlry.
In the case of version changes to nextcloud, there may be changed/additional dependencies. On the subject of more regular refreshes, if there is a security issue with one of the dependencies or an update to say nginx or php for example, just updating the app in an existing container will not pick those up.