i noticed autogen creates a new docker container each time code is executed by agents (default behaviour, can be turned off), so it's safe as you think docker is safe