Don’t have to patch the host at least… I think we have a 6 week sla for certain compliances to ensure we are patching our containers, code, and deps regularly.
That you don't need to care about.. as a dev you want to write your code, deploy and not have to care about the underlying server maintenance.. you are paying for that to be someone else's problem.