Sidesteps Docker, but the whole cgroups, namespacing and that kind of 'weird' stuff is still basically the same.

I think you misread and/or misunderstood my reply.