I agree that cybersecurity features should be included. In fact I think they should be included for free. The problem is that Microsoft wanted to charge the Department of Defense and it sounds like they used politics to make sure they could, and if true then they (and maybe also the DoD?) may have violated some federal laws around government procurement and “gifts” from contractors to the government.

Docker takes a lot of the management work out of the equation as many of the containers automatically update. Manual updates are as simple as recreating a container with a new image instead of your local one. I would like to add try running Portainer (a graphical management interface for Docker). Breaking out the various options into a GUI helped me learn the ins and outs of Docker better, plus if you end up expanding to multiple docker hosts you can manage them all from one console. I have a desktop, a laptop, and a RPi 4b all running various dockers and having a single pane for management is such a convenience.