Going rootless shrank what a compromised container could do to the host.
I noticed some performance issues with my Linux machine. So I used namespaces to shine some light on the problem.
When Docker first came about, it had a serious architectural issue. Docker containers are lightweight because they share an underlying OS, unlike virtual machines, which each contain their own copy.