So if a library is out of date you can just update it. As far as containers go they are fine for security as bubblewrap is pretty solid.