in both cases you're setting up a webserver.

I guess you're concerned about lateral network movement? Justified, but as long as it's patched it's going to be just as secure.

You're right, but with an asterisk. I don't care if my DO droplet gets popped with an RCE. I do care if someone establishes persistence in my home.