I don't like that aspect of OCI containers. You shouldn't be running or building on top of random images made by unknowns.