I was looking for this comment. Seems to fit right in between “just” docker compose and a “fully-fledged” K8s. This book is running Erlang clusters on Swarm on EC2: https://www.goodreads.com/book/show/216601296.
There are a couple of smaller "cloud" providers who do not ([1]). I think this might be simply because they lack the tech for traffic shaping here. So they usually implement a "fair use policy" (whatever that means). But yes, ingress and egress traffic is essentially offered for free.
[1]: Another one is gridscale.io, also from Germany
Your face is only authenticating you to your device because that's what you chose. If you don't want that (e.g. your identical twin sister loves pranking you) you can just use a different authenticator. The remote web site deliberately has no idea your face was involved, it just knows your identity was verified on its behalf by the hardware storing your private key.
I can have a near infinite number of passwords, but I only have 1 face, or 10 fingers. When all of my fingerprints are compromised, and the system only allows fingerprint login, now what do I do ?