Calling docker battle tested is an extremely long stretch. It has several security issues[0], many of which are ignored by upstream as "working as intended".

[0]: https://blog.newsblur.com/2021/06/28/story-of-a-hacking/