“Make sure that the containers can never— make sure the containers can't reach the host and they can't reach each other.”

Transcript evidence from Jay Beale -- Docker Security and AppSec.