If the point is security - then it should be virtual machines not containers. I wish QubesOS was more popular.
For older computers, virtual machines are too demanding.
As for escalation hacks: they happen also on virtual machines. Check virtualbox and vmware cve's.