It's almost as bloated with junk as the desktop version. I've been telling our developers to use debian over ubuntu. A base minimal container with Debian is under a 100 megs. With Ubuntu it's close to 700 megs. There's just too much stuff included by default. That means a whole bunch of things that could be potential security problems. Sure, you have to set up more in the Dockerfile since so little is included, but I consider that a feature, not a bug.