[apitman]

So you pass in the docker socket and the AIO container runs docker commands on the host?

[t-writescode]

That is correct, yes.

[teekert]

It sounds a bit like using the same password for all your services... Hack a Nextcloud instance, gain root on any system through Docker,

[apitman]

I would assume (hope) that the AIO container itself is not exposed to the internet, only some of the containers it starts.