It's also not a VM or so that would cost performance, it's a pretty lightweight container to provide a well-defined set of libraries. Basically only a mount namespace.