No, you're basically right.

To the extent that containers solve a problem, it's mostly a problem with package management, and with UI for process isolation/permissions/hardening.