It can be, yes. One of the largest complaints with Docker is that you often end up running the same dependencies a dozen times, because each of your dozen containers uses them. But the trade-off is that you can run a dozen different versions of those dependencies, because each image shipped with the specific version they needed.
Of course, the big issue with running a dozen different versions of dependencies is that it makes security a nightmare. You’re not just tracking exploits for the most recent version of what you have installed. Many images end up shipping with out-of-date dependencies, which can absolutely be a security risk under certain circumstances. In most cases the risk is mitigated by the fact that the services are isolated and don’t really interact with the rest of the computer. But it’s at least something to keep in mind.
You don’t seem to be getting it… American copyright law can’t affect someone in Libya, unless the Libyan authorities allow it. American lawyers can try to sue all they want, but it won’t do anything unless the business owner visits America.
Libya doesn’t have an official extradition treaty with the US. So the American authorities can bitch and moan about it all they want, but they can’t arrest a Libyan citizen and drag them to America without Libya’s consent. If this is legal in Libya, they’re not breaking any Libyan laws, and they’re not harming Libyans, why would the Libyan authorities care?