They contain the transitive closure of software and libraries to run a binary. Under the hood, they're a fancy wrapper around a pile of tar files. Tar files c

They contain the transitive closure of software and libraries to run a binary. Under the hood, they're a fancy wrapper around a pile of tar files. Tar files certainly contain other files and are also not a security boundary.