> 3. These kernels often contain relevant security vulnerabilities.

This is really the only part of the list that I think has merit. I love Digital Ocean in general, but my own gripe is with their API and its lack of proper automatic key management:

https://digitalocean.uservoice.com/forums/136585-digitalocea...