Does nobody isolate ffmpeg and friends from their application?

I can't imagine you'd have much fun breaking into a container that terminates the moment the original ffmpeg stops, or over-runs its max execution time..