I think really the use case is to run in a VM to handle old code and keep security up to date. I wouldn't want to run it on bare hardware for that reason (3)