Re: welcome to the old way of thinking
The hardest part of learning about containers is to know anything about IT from before 2000 and still firmly believe its relevant to today's infrastructure.
An attack surface is an attack surface no matter which year it's from. A local service has a smaller attack surface than a cloud setup.
Things are changing...things are getting bigger, faster, louder and *shudder* more social; but many of the underlying principles remain exactly the same. Including, amusingly, the tendency in yoof to think you know everything.