Yes
Most of the time, no.
We already ship nginx inside the container, and we keep it configured and up to date with support for things brotli, http/2, non-buffering proxy, correct handling of client IPs, etc.
If you add a new proxy in the middle, then you are responsible for not breaking each of of those features.