Comment by smallpipe

Docker is not a security boundary. You’re one prompt injection away from handing over your gmail cookie.