Does it really take any more time to secure a VPS than a docker container on a custom runtime for a hobby project? Either way you still have to run software and OS updates.