> Their breach isn't really a good indicator as I can't think of any/many reasons that most companies would try and do that... There are a bunch of legitimate

> Their breach isn't really a good indicator as I can't think of any/many reasons that most companies would try and do that... There are a bunch of legitimate reasons to run Docker in Docker. The most obvious is in a build pipeline. For example Jenkins does Docker builds in containers all the time.