For Kernel exploit, probably be true. If one becomes root in a docker container, the worst damage it can do is to that container's files. That is better th

For Kernel exploit, probably be true. If one becomes root in a docker container, the worst damage it can do is to that container's files. That is better the current "sandboxing" in iOS/Android setup, true?