I don’t quite understand their solution. I’d wait.

Upgraded to Debian Trixie two days ago. Runs flawlessly

I won’t say no. There are ways to implement a control without intrusion in the privacy of the average Joe.

I use Watchtower just to notify me of the updates. So the docker socket is read-only.

I second that advice. When choosing the HDD, make sure it is NAS-grade.