> Putting things into Docker and only executing the code inside isolates your host system and does not reveal any stored secret - as long as you do not mount ho

> Putting things into Docker and only executing the code inside isolates your host system and does not reveal any stored secret - as long as you do not mount host data into the container. Doesn't mention why... Gives no similar warning about VM. You usually have to mount at least some data in a container or VM for it to be useful. Of course, being an idiot and sensitive mounting secrets in untrusted environment is the problem, container or VM doesn't matter. Maybe it means there's some 0day where mounting any volume allows container escape or something? But that's not what it says.