Disclaimer: I work at Google on Kubernetes. This is a really good point - I've said it before and I'll say it again - containers neither add to (nor subtract)

Disclaimer: I work at Google on Kubernetes. This is a really good point - I've said it before and I'll say it again - containers neither add to (nor subtract) from whatever you're doing today. If you have a single VM and no shared storage, you're exactly as vulnerable as if you were doing things in a container. And, in the majority of cases, the exact same techniques you'd use in a VM work in a container or Kubernetes too.