Earlier quoted context omitted.
> I still really struggle to understand what the practical benefits to this kind of containerization actually are ... Here's why I started using it years ago. I had a CentOS 6 machine that I wanted to run Plex, Subsonic and Transmission on, but I couldn't, because they had different (EDIT: and conflicting) requirements for various packages. I might have been able to hack it, but it was looking really tricky. Enter Do…
If you didn't have that requirement of conflicting packages, would you still have used docker? Isn't once a year update a large security risk?
As for security risk on the yearly update: all the services are only locally accessible. None are exposed to anyone but me. I do apply CentOS updates daily, though.
My only risk in an attacker on my LAN, and I think I have that locked down well.