As I wrote some weeks ago in “How to live inside a docker container?”, when
you pass a docker socket to your container, you’re essentially enabling the container full access to your Docker host OS. This means that you
can create containers, pull images, or more destructively - stop and delete containers and images.