> I agree but in containers' defense they weren't supposed to be about security in the first place. > In my understanding the main incentive for the huge push

> I agree but in containers' defense they weren't supposed to be about security in the first place. > In my understanding the main incentive for the huge push behind them was immutability and them being microservices-friendly technology. I'm not a container historian, but I believe this came later: when Docker and the like entered the scene with their ideas of immutability, LXC on Linux was already several years old, and BSD Jails / Solaris Zones probably a decade older still; and they were all quite mutable. When I first came across them, I viewed them as very lightweight VMs, with (as you say) rather insufficient security, but still useful for experiments or to segregate services for ease of management.