As someone who also used to hammer on Docker security, it has significantly improved in the last two years. I don't think claims like this have much merit anymore.