nostr:npub1trdnqrfstufc45awha43p6xy2n0v6czuhapzh4r09hap08dg0c6s9gussx nostr:npub17j5xgxhtskpcp0kjd9ldjhm3w6ggns7kkvfp44lk4qsrdwawmjeqvd0ny5

Yeah, it's going to be a big trust relationship, but man... with *so* many potential moving parts, you're trusting them to not only update their app in the container image, but every underlying utility and library used.

That sounds like a lot of work for a small FOSS project to keep up with. Even then, how much behind regular OS updates will the software contained in the image be, even if you update it every week?