Install instruction improvement (#7800)

* Install instruction improvement

* fix lint

* tweaks

content/en/docs/setup/install/istioctl/index.md

@@ -11,7 +11,7 @@ Follow this guide to install and configure an Istio mesh for in-depth evaluation
 If you are new to Istio, and just want to try it out, follow the
 [quick start instructions](/docs/setup/getting-started) instead.
 
-This installation guide uses the [`istioctl`](/docs/reference/commands/istioctl/) command line
+This installation guide uses the [istioctl](/docs/reference/commands/istioctl/) command line
 tool to provide rich customization of the Istio control plane and of the sidecars for the Istio data plane.
 It has user input validation to help prevent installation errors and customization options to
 override any aspect of the configuration.
@@ -20,8 +20,15 @@ Using these instructions, you can select any one of Istio's built-in
 [configuration profiles](/docs/setup/additional-setup/config-profiles/)
 and then further customize the configuration for your specific needs.
 
-Full customization of the installation can be done through the
-[`IstioOperator` API](/docs/reference/config/istio.operator.v1alpha1/).
+The `istioctl` command supports the full [`IstioOperator` API](/docs/reference/config/istio.operator.v1alpha1/)
+via command-line options for individual settings or for passing a yaml file containing an `IstioOperator`
+{{<gloss CRDs>}}custom resource (CR){{</gloss>}}.
+
+{{< tip >}}
+Providing the full configuration in an `IstioOperator` CR is considered an Istio best practice for production
+environments. It also gives you the option of completely delegating the job of install management to an
+[Istio Operator](/docs/setup/install/standalone-operator), instead of doing it manually using `istioctl`.
+{{< /tip >}}
 
 ## Prerequisites
 

content/en/docs/setup/install/standalone-operator/index.md

@@ -1,5 +1,5 @@
 ---
-title: Standalone Operator Install
+title: Istio Operator Install
 description: Instructions to install Istio in a Kubernetes cluster using the Istio operator.
 weight: 25
 keywords: [kubernetes, operator]
@@ -8,11 +8,24 @@ owner: istio/wg-environments-maintainers
 test: no
 ---
 
-This guide installs Istio using the standalone Istio
-[operator](https://kubernetes.io/docs/concepts/extend-kubernetes/operator/).
-The only dependencies required are a supported Kubernetes cluster, the `kubectl` command at the version to match the cluster, and the `istioctl` command at the desired release version.
+Instead of manually installing, upgrading, and uninstalling Istio in a production environment,
+you can instead let the Istio [operator](https://kubernetes.io/docs/concepts/extend-kubernetes/operator/)
+manage the installation for you.
+This relieves you of the burden of managing different `istioctl` versions.
+Simply update the operator {{<gloss CRDs>}}custom resource (CR){{</gloss>}} and the
+operator controller will apply the corresponding configuration changes for you.
 
-The operator is beta in 1.6 and suitable for production use.
+The same [`IstioOperator` API](/docs/reference/config/istio.operator.v1alpha1/) is used
+to install Istio with the operator as when using the [istioctl install instructions](/docs/setup/install/istioctl).
+In both cases, configuration is validated against a schema and the same correctness
+checks are performed.
+
+{{< warning >}}
+Using an operator does have a security implication.
+With the `istioctl install` command, the operation will run in the admin user’s security context,
+whereas with an operator, an in-cluster pod will run the operation in its security context.
+To avoid a vulnerability, ensure that the operator deployment is sufficiently secured.
+{{< /warning >}}
 
 ## Prerequisites