[ParetoOptimal]

I mostly agree, but one big thing missing is Nix is reproducible by default while docker is only repeatable.

[OJFord]

Yeah, I was just trying to avoid anything to which you could say 'well I can do that with docker [and appropriate care & attention]'.