Splitting application into containers greatly increases isolation between components minimizing a chance of turning a bug into exploit. For example, if a compo

Splitting application into containers greatly increases isolation between components minimizing a chance of turning a bug into exploit. For example, if a component can communicate over Unix sockets, then one can put it into own container with networking disabled. Similarly one can selectively choose which part of filesystem is accessible with read or read-write access.