Oh, you're talking about an attacker who's outside of the container? That's a completely different threat model.