I guess all people can be assholes so no doubt there are bad royal mail postmen. However my experience is royal mail have been the exception. They knock and wait.
Amazon however, especially since COVID, dump and run. This hasn’t been the norm in the UK but now they do it all the time.
It won’t be long before we get porch pirates like in the US.
I like to run a hypervisor host as just that, a hypervisor host. The host being stable is important, and also reduce attack surface by only having it as that.
An LXC per service is somewhat overkill. A docker host running on LXC could likely run all the docker containers.