I'm not thinking 1000s of servers, because that is extremely rare, but this definitely doesn't apply to only non-critical private stuff. Many orgs have up to a

I'm not thinking 1000s of servers, because that is extremely rare, but this definitely doesn't apply to only non-critical private stuff. Many orgs have up to a dozen servers, each running multiple services. If you have multiple replicas of certain servers, you can reboot them (or just restart the impacted services) one at a time with no disruption. The thing is, you usually aren't building everything from scratch. A pretty typical containerized web app deployment might consist of postgres, redis, elasticsearch, nginx, task queue and app server containers. Each of these needs to be updated and you're probably only building two of them from Dockerfiles. Instead of just your host distro, you're now waiting on the maintainers of all of these images to push updates that you can pull. Big distros get updates early so they can push them out the instant the embargo lifts, but I doubt all of these Docker packagers and statically-built software maintainers do. You're either stuck waiting or you have to build all of them from scratch.