It's definitely by design, since the containers are meant to segregate accounts (e.g. a company container and a personal container), but a second mode would be useful since many people are using them for per-site isolation.