It allows you to separate these steps and only execute the unsafe ones in a container but not having to do everything in there.

Thanks for mentioning the default list! Good point.