A patch program excludes containers because the hosts are patched. What exposure may remain?

1. Containers cannot contain software vulnerabilities
2. Vulnerable libraries and packages inside container images
3. Host patching always rewrites every running image
4. Every container must be a separate physical server