> Docker (or container images in general) are great but they solve a limited set of problems well and tend to hide others.

I like container images and runtimes. Docker is awful, and its "inside-out" approach encourages and enforces bad practices.