There&#x27;s absolutely nothing special about containers and state. A container is just a namespaced process tree. What resources (CPU, memory, network, disk) is has access to is up to you; there&#x27;s nothing in the Docker design that means state needs to die just because the process dies. All the major container technologies (Kubernetes, Marathon, Amazon&#x27;s ECS etc.) support data persistence via mounted volumes.<p>Docker&#x27;s security concerns are mostly about multitenant systems where you&#x27;re hosting other people&#x27;s containers. If all your own apps are your own, then Docker is certainly a step up, securitywise, from running an app as a process running as its own Unix user. You just shouldn&#x27;t assume that a container is perfectly isolated.