I believe the whole point is that adding unnecessary software to a container also increases the attack surface unnecessarily.