That seems hardly sufficient. You are still exposing a massive attack surface. I run within a rootless docker container.