Just the fact that google is gatekeeping the images instead of dockerhub makes them a better security proposition. It's 2018 and dockerhub _still_ doesn't have

Just the fact that google is gatekeeping the images instead of dockerhub makes them a better security proposition. It's 2018 and dockerhub _still_ doesn't have 2FA. All it takes is one cred-stuffed account belonging to a debian maintainer to take you down if you don't pin your images.