Plus sandboxing.

By running software in a container, I know my machine is pretty nicely shielded from malice, incompetence and carelessness on the side of the developer.