I’d argue that anything but bare metal is not a good compromise, but I’m not balancing the books of a large company. People care about docker escapes so they’r

I’d argue that anything but bare metal is not a good compromise, but I’m not balancing the books of a large company. People care about docker escapes so they’re getting more difficult, at least. Edit: Plus, I’d rather $app_i_dont_fully_trust be sitting in a container rather than on my host. And no, not running apps i don’t fully trust is not something which is at all viable for me.