Containers are not security boundaries. Vulnerabilities in containers are much more common than in VMs.