The Docker runtime is probably ok as it is a tool instead of a community. The registry has a community aspect and is where we’ll likely see exploitation of vendor lock in. Luckily Docker was grounded well and you can set up your own registry.