Yes that's it.
For farming, you don't need the bang with a DNS approach.
Security concern: if you miss an update on a separate installation, you are not better off.
What I did was to start with a standard installation and when I spend too much time updating my separate installations, I have switch to a farm.
Experiments / Upgrade are done locally on my windows laptop.