Thanks for your answer. So there is no need for galvanic isolation?
The TX/RX logic on the Nextion is 3.3V though and this is still within limits for 5V logic so it doesn't matter.
The project is not "done" when it gets deployed 
also I think its much faster to upload directly via USB-TTL and I don't like the SD card/card readers hassle.