You can break out of a docker container, especially with the permissions many people would give such a container (privileged=true, etc).