They actually do a small login f2b effort right in JF, but it appears to be quite limited.

The container is more secure by default, and if people set up their docker well it reduces the dangers substantially. A lot of people don’t go docker though.