

Exactly this. It checks periodically if a newer image for the tag of the container is available (e.g. vaultwarden:latest) and tells you about it. You can setup mail, sms, Teams, you name it.
So then you know a new version is available, can check the changelog and decide if the update is worth it.
Remember that one, but honestly: not worth much testing a device exclusively in laboratory settings and not in real life situations.
It is a risk but I think not one you can and should avoid. At least if you want your mobile device to perform.