Hopefully, you trust your organization and all those who have access to these systems. You will most likely be setting up virtual machines from scratch. It is probably impossible to get the virtual machine from someone else due to its sheer size. Therefore, you will be aware of what is inside the virtual machine and what isn't. This being said, with the Docker containers, you will not be aware of what is there inside the image that you may be using for your container(s).