It’s also great at hiding vulnerabilities by abstracting them within the containers instead of leaving them visible to the OSes which have built in mechanisms for addressing the vulnerabilities such as with simple updates