We Chose the Harder Path: Docker Hardened Images, One Year Later(docker.com)

https://www.docker.com/blog/why-we-chose-the-harder-path-docker-hardened-images-one-year-later/