Why do you say that? Docker Hub is, of course, susceptible to supply chain attacks, as are the official containers of each of these projects, but how is that all that different from installing these projects on bare metal? And how are any of them “extremely” vulnerable?

I didn’t suggest anything that isn’t either an official build from the project maintainers, or a very well supported community build from a reputable source.