It is completely possible and the fact that you can't be honest about that says a lot. 1. Containers are sealed and verifiable, cryptographically, down to the last byte. 2. Immutable container runtime engines exist. I haven't been in the scene for a few years, but both AWS and Google Cloud were experimenting with such things before I retired. You're flailing.