Tbh, containerization is only "needed" (not for blogs but in general) because our systems, for some incomprehensible reason, aren't all using capability-based addressing. And unlike capabilities, containerization is not even a proper security feature (instead one has to go for VMs, which are needlessly heavy in comparison with capability-based addressing).
rsync over ssh does quite well for a static site update.
