you have to read the runtimes from disk instead of loading the system libraries.
how do you know everything in the container is always using the patched versions of libraries? historically that was not always the case and software used vulnerable libraries.
