3 points
Containers can be entirely without anything. Some containers only contain the binary that gets executed. But many containers do contain pretty much a full distribution, but I have yet to see a container with a password hash in its /etc/shadow fileβ¦
So while the container has a root account, it doesnβt have any login at all, no password, no ssh key, nothing.