A fuzzy issue of responsible disclosure

Re: attack scenarios, cloud vendors who let you run container images seem like a key example. I know some people prefer tar images for container payloads, but I believe some people supply filesystem images, and most cloud container infrastructure doesn't really have a way to protect against kernel exploits, so this kinda seems like it matters to me.

Protecting against this vector does seem pretty hard though.