Docker in and of itself is not the problem here, from my understanding. You can and should trim the container down.

Also it’s not a “whole nested computer”, like a virtual machine. It’s only everything above the kernel, because it shares its kernel with the host.

It’s sometimes even sometimes useful to run Rust or C++ code in a Docker container, for portability, provided you of course do it right. For Rust, it typically requires multiple build steps to bring the container size down.

Basically, the people making these Docker containers suck donkey balls.