But if you are not reviewing every other piece of code that you run without Docker it’s not much different from running it in Docker without reviewing the base

But if you are not reviewing every other piece of code that you run without Docker it’s not much different from running it in Docker without reviewing the base image / images pulled in as dependencies.