My security is a bit like my spelling in this file.
I mean I try not to do anything stupid, but I make no guarantees. Use at your own risk.
If there is a security concern regarding any of the devcontainers that I've set up, and you'd like to suggest a best-practice to include in the devcontainer, open an issue with the word [beetlejuice] in the subjectline so that I know you've bothered to read. I'll probably implement your recommendation. No promises.