As you said, I am perfectly aware that in an ideal world security would be on lockdown. How it behaves on Linux is how it SHOULD work. That doesn't change the main point that you can't hit the ground running with Docker containers in Linux.