I used the nicholas-fedor Watchtower branch for a while.

I use Dockhand now (switched to it when Portainer accounced their enshittification), and that has auto-update built-in. So I no longer needed Watchtower.

I believe Arcane also has auto-update, since Dockhand has hinted at their own enshittification a few years from now…

My Plex is updated, and hiding behind a random-long-text-string wildcarded subdomain that (so far) has not been discovered.

My Crowdsec intercepted 5X the normal number of hacking attempts & port scans on October 17th… no doubt from dirtbags trying to exploit this.