@LilaHexe They allow for "It works on my machine code", aka very fragile and limited code with strange dependencies/quirks to be shipped.

They bring their own dependencies for libraries, which is bad when a security problem in one of those libraries occurs because you need new containers for everything.

It's very hard to keep track of the installed software & library versions to be safe.

LXC/Docker/etc. container barriers are very weak security-wise and people might not realize that.