The open source edition is meant for teams that want to run CI on their own trusted infrastructure.

That being said, we are definitely making a long term bet on Docker and containers, and are confident security will improve over time.