are you sure containerization would be more secure? this is also a rootless podman escape. the lesson here is to not give random people shell access to your systems.