Docker Engine v28: Hardening Container Networking by Default (docker.com)

yet another soon to be badly documented hack that will make the life of people who know what they are doing miserable in an attempt to save a hypothetical idiot.