Containers may not be a security boundary yet, but they do promise a level of security and even though the kernel and various runtimes may not be there yet, one

Containers may not be a security boundary yet, but they do promise a level of security and even though the kernel and various runtimes may not be there yet, one day they will be. Every time there's a container escape or privilege escalation, it's treated as serious and patched. I look forward to the day when we can confidently say that containers are in fact a security boundary.