You can of course run multiple Services on one container, but i would recomment to use one container per service.
You can do upgrades independently, so if pihole has an upgrade to the next debian release but eg paperless does not you can do that upgrade without breaking your other software...