Why should container runtime sockets not be mounted into ordinary application Pods?

1. Sockets always increase application memory usage beyond limits
2. Runtime control can enable broad host and workload access
3. The mount automatically revokes the Pod's service account
4. A runtime socket is only a read-only image list