Comment by tptacek

I agree: I think the container image is what matters. As it turns out, getting more (or less) isolation given that image format is not a very hard problem.