[q3k]

> You can also call docker commands by being part of the docker group IIRC.

Which effectively gives you root on the host.