Can you elaborate on this? If someone pwned my container and is able to execute commands, what does it change whether they get to use a text editor? Otherwise, what does it change whether unused programs are around?
I believe the whole point is that adding unnecessary software to a container also increases the attack surface unnecessarily.