What is a common mistake with Docker networking?

Publishing every container port to the host exposes services unnecessarily and makes network boundaries unclear. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.