I do not know: the lack of proper docker compose support it is a problem for me.
About security: gVistor adoption failure in Google is a proof that containerization cannot be enforced easily and container will always be less secure than a VM.
If you want proper security go to firecracker [^1].
Podman is the "RedHat/IBM docker-way" but I see very little benefit overall; never less if it works for you great and go with it!
If you want proper security go to firecracker [^1]. Podman is the "RedHat/IBM docker-way" but I see very little benefit overall; never less if it works for you great and go with it!
[^1]: https://firecracker-microvm.github.io