Wow dude. Clearly you have not touched Docker. And if you have ever run a VM that is a container. Or I guess you are only using a mainframe? It's just a component like any component to any application. And there is plenty of tooling to help with updates and compliance, like CoreOS open source of Clair. Your point seems to come from another place because technically it's totally misguided.