Comment by belter

Containers are called "Leaky Vessels" for a reason...

"Container Escape: New Vulnerabilities Affecting Docker and RunC" - https://www.paloaltonetworks.com/blog/prisma-cloud/leaky-ves...

VMs offer a much better isolation mode.