Recommendations / best practices for user tasks and (external) task list application

Yes.
It works the same as the picture in this post:

Except replace Tasklist with the Portal Angular Web application (GitHub - DigitalState/Portal: The DigitalState Portal Spa), and Camunda Server with the Services Microservice(GitHub - DigitalState/Services: The DigitalState Services Microservice).

It looks like this:

User 1 == Angular App
OroBap == Services Microservice

Formio and Camunda is never directly exposed to the client side. The Service Microservice fronts everything.