I think exactly the opposite, in 5 years i never had any problem with IP tables (although i assign a manually created network to each docker).

One of the biggest advantage of docker is that it can access unlimited memory and storage from host, without reserve a specific amount of both. If now it used 200mb, it doesn’t waste the 8gb you would assign to a VM. And if tomorrow it needs 10gb, it can access the extra unused RAM.