It is completely possible and the fact that you can't be honest about that says a lot.

1. Containers are sealed and verifiable, cryptographically, down to the last byte.

2. Immutable container runtime engines exist. I haven't been in the scene for a few years, but both AWS and Google Cloud were experimenting with such things before I retired.

You're flailing.