But the update problem is also present on direct installs. It's is less bad on Docker. Example: 2 containers which rely ffmpeg, and there's a vulnerability in

But the update problem is also present on direct installs. It's is less bad on Docker. Example: 2 containers which rely ffmpeg, and there's a vulnerability in ffmpeg. But container A can't update cause ffmpeg's update breaks something else... At least with Docker you can update container B, and maybe isolate A. On a direct install ffmpeg is a shared component. So now both apps are locked to a vulnerable version. Not to mention that shared components are often outdated for the sake of stability. So App A is restricted to the same version as App B, even though App A would like version 9, and B is on 8.