&gt;  each and every single one of them has to be maintained, updated for security fixes...<p>No, of course not. No single container should have a lifetime greater than a day or two. &quot;Maintenance&quot; is deploying the latest, integration- and end-to-end-tested version of the software, as part of a continuous build pipeline.