it's disappointing that what is likely the best answer to "make the computer work reliably over time without breaking" is now "make lots of little fake container computers that never change and then only use them through acceptable ports"