first, this is s builtin solution and more lightweight. it also provies enterprise hooks that can be accessed by defender or endpoint. an api for windows apps to launch containers. docker creates one vm to run all your containers. these new ones are containers that live idependent of anything else.