Comment by afiori

Kernel level exploits are more dangerous but also way less common, for a lot of places docker is sorta okay as a security boundary