Maybe a way out of the supply chain attacks? Will take time and adoption of course.

Somehow states the obvious: you don't always need docker. Still a good reminder, especially true with the trend of single binary web services like what can be achieved with Go and Rust.

This looks like an interesting intrusion detection tool. I like the overall approach they chose.