Good point, apps are missing the docker layered file system to isolate container file writes.