why not think of them as process (group) spawned with particular parent process setup, in particular the cgroups etc configuration effecting isolation.
In the bad old days before setns() it was more of a pain to add processes to a container since they had to be children of an existing process in that container.