Docker is not designed for security, and shouldn't be mistaken for a secure border. It can, with painstaking effort, be made semi-secure for particular audited

Docker is not designed for security, and shouldn't be mistaken for a secure border. It can, with painstaking effort, be made semi-secure for particular audited recipes, but this isn't a FreeBSD jail we're talking about.