via https://www.helpnetsecurity.com/2024/11/08/am-i-isolated-open-source-container-security-benchmark/
