> Docker/containers used to not be hardened enough. Are they now? I don’t think they ever will be. At least once a year there is a kernel bug where root in a n

> Docker/containers used to not be hardened enough. Are they now? I don’t think they ever will be. At least once a year there is a kernel bug where root in a non-root container/namespace can be elevated to root on the host