Re: Yep. Docker Con.
It's a total con.
Basically a chroot with bind mounts is docker.
There are other namespaces under linux (pid namespace, network namespace etc), the rest is just hype and nonsense.
It's best innovation is the name and the iconography but fundamentally it doesn't do anything other than use Linux facilities and try to pretend it's somehow invented copy-on-write or package management.
That said, it's strength is just how shit it is, it means plenty of work fixing problems people didn't have.