Thanks - I didn't hear about that docker exploit, that's bad for bare-metal docker providers I guess, but won't affect most people who would use VPS or their own PCs.
I see, as long as there will remain a docker container, and preferably an easier to use one. It should not be anything like as difficult to set up a witness as it currently seems!