The difference is not nesting your container in VM. Instead, the container is secure, isolated as VM. Then container becomes the foundation for hosting platform, e.g. EC2, not just app deployment atop IaaS.