There are definitely vulnerabilities being discovered in user namespaces, but they&#x27;re a significant layer of defense as-is that will only improve.<p>To be honest, I don&#x27;t think containers are even particularly good for local development. I&#x27;d rather run something that acts like my production environment, which means a virtualized system that&#x27;s version- and patch-equivalent to my prod environment. I use Vagrant and scaled-down virtual machines for that.