In the future, we want to offer fully encrypted runtimes, including containerization volumes.
See:
[1] https://developer.ibm.com/articles/advancing-image-security-encrypted-container-images/
[2] https://aws.amazon.com/blogs/containers/introducing-amazon-ecr-server-side-encryption-using-aws-key-management-system/
[3]
In this way, both your data AND your images would only be accessible via a keypairing that either Railway, or even-more-ideally only yourself, controls