I think they are getting a lot of value from the rest of the Kernel's networking (VETH/namespaces etc talking to containers).