This is a security restriction to prevent from the container to do a mount back into the RouterOS FS.
There was a CVE as far as I remember that showed how the telnet binary can be mounted from the container back into the RouterOS FS and well it ended pretty bad...