Is your container isolated from your internal network?

If I were to compromise your container, I’d immediately pivot to other systems on your private network.

Why do the difficult thing of breaking out of a container when there’s a good chance I can use the credentials I got breaking in to your container to access other systems on your network?