Currently after a VM is selected and loaded, the Security Center reports a high number of vulnerabilities to Remediate. For example, the Windows Server 2016 Datacenter image lists 151 issues. Remediation creates a great deal of work to research and implement.

Ideally, in addition to the "standard" image, a "high security" version would be available that would have all OS vulnerabilities remediated, which would have no issues reported in Security Center.