> Maybe it can be harder to exploit to find real linux ip, connection rsa keys,and who operate linux, from which real ip address through webrtc.

The pointless part about it is not about getting the root access. Despite it being containerized, It still could do much stuff even in not a real machine.

If the app is able to connect to external database for example, The attacker could do the same too. Hence, i think this is useless by itself already.