The point is that to get around Docker's security issues, you have to run it in a VM to get secure multitenancy.