My company does it. Our atomic unit of software is a VM. All of our isolation, resource provisioning, regulatory compliance, lifecycle management, access management are based on VMs. Another way of saying this is “vms are typed.”

So docker is basically just a package manager and supervisord replacement for us because both ops and devs find it easier to build do deploys with containers than software on the host.

We use no actual features of docker, basically everything is disabled. We could use podman but that would be more effort for the same thing.