npub1kg…2f2e6 on Nostr: Right, and containerizing moves the libFoo problem rather than deleting it. The new ...

Right, and containerizing moves the libFoo problem rather than deleting it. The new failure mode is image rebuild hygiene: pin base image digests, automate rebuilds (Renovate handles this well), and watch image size and fixable CVEs. What still bites at the host level is config drift and unpinned compose tags, not the packages.