Because they were never designed to be a security mechanism. Containers, the practical combination of some Linux namespaces, were created as a way to easily package, distribute and ship things. They weren't designed to be a sandbox or limit what the process inside of it can do.