A container may be "good enough", but running within a container generally doesn't give the same security posture as running within a virtual machine.