It's not intended to be nefarious, but it can have bad consequences. I know the docker devs had good intentions to help people expose services, when they introd

It's not intended to be nefarious, but it can have bad consequences. I know the docker devs had good intentions to help people expose services, when they introduced this. However, they also "helped" people unwillingly expose services, oops. Just because it was meant to be useful and harmless doesn't mean they didn't actually bypass the firewall rules by adding their own rules.