Exactly. The author considers the fact they the official images are built from source as a negative. Though that’s what allows them to actually generate updated

Exactly. The author considers the fact they the official images are built from source as a negative. Though that’s what allows them to actually generate updated images. They mention trust of who’s building the images, which is valid, but then using `apk install nginx` means you still have to trust that package maintained. It’s really just moving trust from Docker to Alpine. It’s fair that it’s a reduction of entities that need be trusted since they are using Alpine as their operating system already, however they are still running Docker binaries... It’s pretty neat to be able to say they don’t use Docker Hub for anything, but it doesn’t seem to offer any advantage.