Well. The flipside is that you can get a security oriented well configured virtual machine instead and ignore all this Docker thing that is no better at anythin

Well. The flipside is that you can get a security oriented well configured virtual machine instead and ignore all this Docker thing that is no better at anything security than plain Linux kernel. (While still using, say, Kubernetes to manage it.)