If all the code and data eventually move into the dedicated user account, why wouldn't it also eventually move into the container/vm?
Don't mount all your code every time.
E.g. when working on a frontend only project, you don't need to mount the backend directory and vice-versa. This limits the attack radius.