Do docker compose setups still need watchtower?

It’s better to have it or use a podman

We rarely change the base image, but sometimes it is happen - to apply security patches to the base OS or to improve something.

However, for docker compose you always can use a docker compose pull, then docker compose up -d to update it manually.