I agree with original intent behind docker. But is the idea of unix namespaces not serving wider purpose than what docker/podman is delivering..? If process in

I agree with original intent behind docker. But is the idea of unix namespaces not serving wider purpose than what docker/podman is delivering..? If process in question is contained within namespace then would it not be enough to stop the exploit of process in question from doing harm to your system? I assume the bad actor would not combine such exploit with, say, kernel exploit enabling to escape unix namespace.