Agree. I keep telling that container may provide some benefits but its really not security (especially docker which uses LXC which is still not complete und as

Agree. I keep telling that container may provide some benefits but its really not security (especially docker which uses LXC which is still not complete und as you said uses a shared kernel - one plus point is Ubuntu's combination with AppArmor which mitigates certain attacks but configuring AppArmor is itself often overseen. Other distros are worse). If you want to secure one app from another, just use separate hardware.