Comment by kube-system

They aren't immune, but they almost universally have better security posture than any alternatives.