Watch the talk. It's pretty entertaining.

The point is that to get around Docker's security issues, you have to run it in a VM to get secure multitenancy.