Why is it risky to set no memory limit on a production container?

Without a memory limit (cgroup constraint), a container with a memory leak or unexpectedly high load can consume all available host memory, starving other containers on the same host and potentially triggering the kernel's OOM killer to terminate arbitrary processes rather than just the offending one in a controlled way.