As a sysadmin that that worked on securing linux apps before docker was a thing, imo doing it with docker is a lot less complex than before. No tech is perfect

As a sysadmin that that worked on securing linux apps before docker was a thing, imo doing it with docker is a lot less complex than before. No tech is perfect, but docker has dramatically reduced the surface area of tunables that my application devs have to care about in order to get our product shipped. Even if it's not brought it down to zero, it's a step in the right direction in terms of UX complexity exposed to the developer.