A Docker blog post indicates:
Docker containers are, by default, quite secure; especially if you take care of running your processes inside the containe
You can reboot host machine by echoing to /proc/sysrq-trigger on docker. Processes running as root in docker can do this.
/proc/sysrq-trigger
This seems quite good reason not to run processes as root in docker ;)