Docker isn’t, but I was under the impression that hyperscalars tended to put all their containers in lightweight VMs (like kata containers) anyways for security purposes