This presumes you trust the workload in the container (which you might!). Containers are not an adequate security boundary for untrusted workloads to assume th

This presumes you trust the workload in the container (which you might!). Containers are not an adequate security boundary for untrusted workloads to assume they leave the host unchanged.