Containerization arose out of Linux namespaces. What you get is process segregation under the same kernel, like jails or chroots but more granual. So security, that's the answer.