[kobalsky]

you are also safe if you are not running (EDIT: inside) the container as root, which is a common security practice for containers nowadays.