How's Docker security these days? Wouldn't there be risks of exploiting remote code execution vulnerabilities in the old browsers, then finding a way to attack

How's Docker security these days? Wouldn't there be risks of exploiting remote code execution vulnerabilities in the old browsers, then finding a way to attack the host from within the container? Especially given that, if I'm reading this right, all users within the container have complete, password-free sudo access: https://github.com/ikreymer/netcapsule/blob/2ff2f5d74fb517eedff786bfad3342710d712d0c/browsers/base-browser/Dockerfile#L41 https://github.com/ikreymer/netcapsule/blob/2ff2f5d74fb517ee... I guess an attacker would also have to get the malicious code into one of the archives somehow, but that should be possible, right?