It generally is more secure just because the system container virtualization system is "more complete", so it's harder to get out from under it. My understandi

It generally is more secure just because the system container virtualization system is "more complete", so it's harder to get out from under it. My understanding with Incus(the OP link) it's the same virtualization system, so there is no real difference, security wise between the two. The question then becomes can they get out from under the virtualization and can they get access to other machines, containers, etc. Docker's virtualization system has been very weak security wise. So a system container would be more secure than docker's virtualization system.