> the best "just works" experience but I didn't like that it wasn't using any kind of containerization which has caused them issues with shared libraries like PHP being difficult to update. As well as security concerns about one insecure app giving access to the whole server.

imo the reproducability guarantees of docker aren't enough and domething like NixOS is needed.