Just a nit for the internet. Docker's "official" images don't mean they're official to the project. It means its officially maintained by the docker community.
This means `drupal:latest` is not an official Drupal project and this likely affects other projects.
Wiz fell into this little trick in their explanation of php2shell like many people do.
It doesn't particularly matter since they're clear this has nothing to do with Drupal and they just used that image along with others as an example. But its worth stating again.