The jailer is just a seccomp sandbox. It's not a novel defense system. Sandboxes get broken all the time.