My naive understanding is that containers do not provide complete security.

Also, I could see giving a user shell access within a container and still restricting what they do with SELinux.