Linux containers vs. VMs: A security comparison (InfoWorld)

This sounds to me like "Cobra oil or rattlesnake oil, a health benefit comparison".
While sandboxing through containers or VMs might make some atacks more difficult, it opens up a completely new attack vector: attacking the sandbox itself.
The complexity of the whole system is much higher, and complexity is the foe of security.
Minimalism and careful auditing will help, but they have a high cost in competent work.
Snakeoil is so much easier and sounds so much better.