Hacker News Reader

You can set it up so that the user doesn't have to type sudo docker. But they still effectively have root access via docker.

I guess it gives some social pressure not to do superuser things?

It looks like a package manager choice. Dpkg/Apt isn't doing by default what they actually need, so they use Docker instead.