From an administrator standpoint I used to hate containers at first because I was worried about having 3 different versions of a support library on a system all with separate potential vulnerabilities. However we’ve managed to shift our security posture to the left and now all containers are scanned and gated before release approval. This ensures that the devs have the flexibility they want and I have more of the peace of mind of not having to maintain the libraries anymore.