Are you not concerned about all the other platforms that rely on containers as security boundaries between tenants? There are a lot of them.

It is hard to answer that since the stack is so convoluted. Some parts are forced on the user. Copilot is built into Microsoft Office workplace applications.

If you break out of a container, do you have access to the same system that serves these applications? Who knows, it looks like a gigantic mess.