The docker daemon has basically root over your system, so any escape can end very badly.