A lot of neophyte self hosters Will try running the binary in Windows instead. Experienced self hosters will indeed use docker.

Then out of the ones that are using docker some of them will set it up as privileged.

And then how many of those people actually make read-only versus how many just add the path and don't think about it.

Don't confuse your good practices with what the average person will do.