[almostgotcaught]

not only is this a completely different use case, it's not even true:

https://stackoverflow.com/questions/60840320/docker-50-perfo...

[magicalhippo]

tl/dr: libseccomp version used in combination with docker's default seccomp profile.

More discussion here https://github.com/moby/moby/issues/41389