But despite all that description, all my deployments have been one-liners with 3-4 cmdline params only. It really adds near-zero deployment cost.

Squid can do what varnish does, but it's 2x slower by my measurements, and it has a gigantic config file. (Squid can do things that varnish can't, so you may have to use it anyway.)