They called Docker broken.

  From a security and composability perspective, the Docker
  process model - where everything runs through a central
  daemon - is fundamentally flawed. To “fix” Docker would
  essentially mean a rewrite of the project, while inheriting
  all the baggage of the existing implementation.