If someone’s self-hosting, I’d be willing to bet they don’t have the same hardened config or isolation that a cloud provider would.

No. Docker containers aren’t a full sandbox. There’s a number of exploits that can break out of a container and gain root access to the host.