Containers are often used as a way to not have to keep things up to date, or install properly. Don’t have to be, but often are. Also, not have a separate kernel means you aren’t protected from things like the recent exploits when you allow things uploaded to run. Maintaining Debian Stable is easy really. Love me some Debian. 😀