You don't need to be in the container and trace from there, you can run strace outside of the container (you just have to make sure that the process ID you use is the one as seen from the host).
And on docker desktop on mac/win it’s at least some hassle to get into that hidden VM (but let me know if I’m wrong)
On linux-no-vm-bs it’s fine, sure!