there's nothing in the container except for the wireguard startup script, and the macaroon is just for generating invoices. Even if there was an exploit it's hard to see what they could do with it.

That’s a pretty tight blast radius. Invoice-only macaroon changes the tradeoff a lot; do you rotate it or treat it as disposable?