Is autocomplete also handled per container? There's an awful lot of privacy sensitive info that can be gleaned from there but it's not listed as being covered.
Anyways; it's not safe by default which should preferably be.
The test pilot experiment is really to help us to figure out how people are using containers.