Not really, if some noob deploys janky code they don't understand, than someone will eventually worm it for sure. Containerization has not prevented an uptick in nuisance traffic from Cloud providers, but made it orders of magnitude worse.

Qubes, Gentoo, and FreeBSD are all a better place to start if you are interested in this sort of research. Best of luck =3