There's No Shell, So There's Nothing to Pivot Into
The strongest argument for a shell-less image is not a feature list. It is what happens to an attacker who just got code execution inside your container and then checked what they could do with it.
Mo
