• Better isolation
  • Jail
    • (chroot)
    • privilege seperation (privsep)
    • works better for single tenant workloads

References

1. We don’t use containers, and here’s why. - YouTube