Comment by adriancr

securing is straightforward, too bad it's not by default: https://docs.docker.com/engine/network/packet-filtering-fire...