It used to run on top of lxc but it was replaced by https://github.com/opencontainers/runc if I'm not mistaken.

Not anymore - it used to. Still uses Linux namespaces and changeroots.