Getting Started With Dev Containers (and Why They're Not a Perfect Sandbox)
Dev containers give every project a reproducible toolchain, built from shared templates and features. They keep coding agents away from your host files, but your code can still leak, and Docker in Docker opens the host back up.