> docker has a daemon that exposes an HTTP API
This API has to enabled explicitly. Docker daemon works by using a unix socket instead ( "/var/run/docker.sock" ).
> acts more or less like an init for containers
There is Docker daemon and there is Docker CLI. Both have separate scopes.