Don't forget helm charts and docker containers. The security/assurance of that supply chain is pretty lacking.

It feels like some people are actively applying the (historical?) Wordpress security model to Kubernetes for expediency.