Docker runs containers with root privileges by default, and that's a bigger risk than most people realize

Docker's default root setup turns one vulnerable container into a full system compromise

Preview courtesy of XDA. The full article opens on their site.