People constantly confuse the security benefits of sandboxing and isolating applications (seccomp etc) with "containers".

Most container implementations were not born with security in mind. Also, overlay filesystem are not required for improving application isolation.

There's a zoo of unmaintained docker images, snap and appimage packages & same Linux distributions that are full of vulnerabilities.

Nobody care or has the time to backport security fixes to whole zoo, unlike traditional distributions where maintainers are responsible for doing that.

Statically compiled languages are only making things worse.

This is going to come back and hurt all of us in few years.