This rings true to me. I'm a westerner and I see how geo-politics is being handled and it really is a bunch of kids.
Not trying to do whataboutism, but its important to note that the insights on how Russian population are controlled with fear is echo'd throughout the world. US and its now inbred hatred for the word "communism", and its forced relation with Russia, etc is dissapointing.
If we manage to survive the current crisis /and/ manage to de-escelate, it will take generations of peaceful teachings for large powers to actually calm down. I find this scenerio unlikely.
I like to run a hypervisor host as just that, a hypervisor host. The host being stable is important, and also reduce attack surface by only having it as that.
An LXC per service is somewhat overkill. A docker host running on LXC could likely run all the docker containers.