If it was sufficiently locked down, yeah. It's only going to live long enough to give me an answer and then everything it can write to goes away afterwards (besides the answer itself).

What harm can it do?

Does Docker do that or are you speculating?

Also - podman?