The creator of borg and k8s of course already run such tools for untrusted inputs in containers, but there is also an endless stream of container escapes.