I would recommend the Docker install method as the forward-looking choice. Docker is a popular option for self-hosting and as discussed here on the forum, the Ghost CLI method doesn’t handle allowing to you self-host the Ghost ActivityPub or analytics services if you want to do that.
This morning in the official forum post about the security update, a Ghost staffer posted that “We’re actively working on improving when and how we release security updates to the Docker image.”
So I expect going forward we’ll see that situation improve and Docker support to exit “Preview”.