1. A Docker container is built from code—commonly a Dockerfile—and as a result, you can be confident of what a Docker container will look like when it is built. An SOE is also built programmatically, and so all builds in the SOE should look the same (perhaps allowing for minor differences when deploying on different platforms).
2. The MariaDB service takes up disk space, which although seemingly small, would waste a lot of storage if deployed hundreds of times. It also means you need to ensure it is disabled when it is not needed, which is not a necessary check if it is not installed at all.
3. Build the image off the most minimal set of packages possible. Don't include anything that isn't needed across all (or at least 90% of) machines. Clean up the image (for example, sysprep) before completing the build process.

4. If a password...