[dragonwriter]

> Does the complexity of using containers bother anybody?

It doesn't seem all that complex; sure, its (in the typical cloud use case) another level of organization, but done right it should actually simplify organization and deployments.

> It just seems like this adds so many more attack points by removing the virtual machine which was a good way to organize services.

Containers are different than VMs, but using them doesn't mean "removing the virtual machine". Particularly in the use cases that Google is embracing (e.g., on a cloud platform where the containers are for use on VMs.) How, specifically, does it add "attack points"?