A unseen open port like 2375 for accessing the Docker daemon on a host from outside of the network could be a security nightmare. Limitation of the attack surface by only opening unix:///var/run/docker.sock or using localhost:2375 limits the scope of reachability to the host locally. To securely acc...