Because since then code has got more hostile. Arbitrary code execution attacks and then local root exploits are not uncommon. You have to make some effort to protect against these. Lxc as mentioned at least isolates processes, file system and network access which helps a lot.