When we will see first time that some really common docker base image (or layer) is infected and the malicious stuff activates? Think about the consequences; that is so many services that would go down that it would probably collapse our infrastructure for a moment.
It really needs someone to lurk something nasty to alpine or such "root" image/layer.
That can never happen, right? Right?