It can dynamically link within the container, but as far as I know the container as a whole does not dynamically link with the outside world. Its effectively a

It can dynamically link within the container, but as far as I know the container as a whole does not dynamically link with the outside world. Its effectively a chroot with a full system image inside that root filesystem. And that's what we're talking about, effectively; how self-contained and sandboxed the package itself is.