I would say that finding that balance is up to the individual admin and application, really, which is where the defense in depth comes in. Yeah, it’s rare, and if those exploits are being used it means you’ve got the attention of someone you probably can’t really stop, but it’s something to take into consideration. Bad configs can cause data leakage across container boundaries, too, so without knowing the admin’s skill level, I tend to recommend against sharing that hardware with something that might have something valuable on it. AI has made it easier for script kiddies to find zero-days and exploit APT-level vulnerabilities, too.