You seem to ignore or downplay all the other ways a container can cause problems, including but not limited to: - Being a backdoor to the rest of your network

You seem to ignore or downplay all the other ways a container can cause problems, including but not limited to: - Being a backdoor to the rest of your network (sniffing network traffic, or more simply reverse ssh-tunneling to an outside server) - All the various "fun" botnet-related activities (spam being the king here) - Actively serving malware to the rest of your network. EDIT: Formatting, and well, others answered your question less specifically but more eloquently.