Pornhub and its related companies aren’t the only “normal” porn sites out there, there are thousands of sites not owned by the parent company. These are just the big names everyone knows. Blocking access to porn on a statewide basis is only really possible at the ISP level, and of course those are private companies not owned by the state (in most cases). Even then, a cheap VPN would be able to get around that.

It’s akin to standing next to someone and telling them not to breathe your air.

VMs have a ton of overhead compared to Docker. VMs replicate everything in the computer while Docker just uses the host for everything, except it sandboxes the apps.

In theory, VMs are far more secure since they’re almost entirely isolated from the host system (assuming you don’t have any of the host’s filesystems attached), they are also OS agnostic whereas Docker is limited to the OS it runs on.

I worked at Disney+ until a few months ago (got laid off after 5 years, how nice of them), everything was still segmented internally. Even a year or more after the Hulu merger we still operated essentially as two separate companies. They did their thing and we did ours, practically no communication between the teams.