The premise of the article is wrong from the start. Containers where never considered a security boundary exactly because they all share the same kernel. That's why projects like kata containers exist that use the hardware enforced boundaries of virtualization.