comparing the risks of AMPPS patches to open-source alternatives like Docker?