I dunno. The compose file I use to run my agents right now is _half_ the size of that configuration, and I don’t buy that Docker is “more complex”

Docker won’t save you from prompt injektions that attack your network.