Dropping privileges from docker containers, and container isolation are both very interesting and important topics - ones I hear discussed constantly. This author would serve himself much better by dropping the self congratulations - no reason at all for comments like “tech bros crying” and “container isolation is a hard problem - unless you’re me!”. Sorry, you’re not the only nerd smart enough to populate the capdrop table. Also, the default app armor profile for Docker leaves -a lot- to be desired. I hear the term “Echo Chamber” most often from people who deem themselves smarter than the rest, and always in an accusational way... fairly ironic if you ask me.