There are way too many ways for things to potentially escape from a container and start interacting with the parent os. These can vary from simple misconfiguration (they’re not secure for this out of the box, and there are aspects of this that are easy to get writing) to unknown kernel vulnerabilities that can’t reasonably be defended against. As someone else said, use virtual machines if you’re really concerned.