This was done for multiple reasons but mainly security and to allow customers to whitelist a certain ip range.

Yeah typically run a single go service or use devspace to combine multiple services using published containers

Python indeed