[roboben]

docker is not a security boundary but a resource boundary.

[cute_boi]

It is security boundary but a weak one. Escaping from docker is very hard.

[rvz]

> Escaping from docker is very hard.

You mean a microVM.

A docker LPE (local privilege escalation) requires a kernel exploit such as Copyfail would work under docker but not in a microVM.