Hardened images ship with no shell, no package manager, no download utilities. Immutable and near-zero CVEs, kept clean by a maintainer who patches on release. #HardenedImages #CVE #Containers