Docker Compose's Default Security Gap: Why Hardening Rarely Gets Enabled

Docker Compose files overwhelmingly lack basic security hardening—91% have vulnerabilities—because the tooling ships with security defaults off and examples don't enable them. This represents a systemic risk as Compose moves closer to production use, while remaining an afterthought in security scanning tools compared to Kubernetes and ECS.