Kevin

Containers, the concept that Docker implements, lets app developers give a self-contained environment for distribution. For devs that means consistency in deployments across environments, which in turn means sysadmins can deploy each of these apps as fully isolated units.

With that, you get really clean installs/updates/uninstalls, and your deployments get done with a well-defined, declarative definition file which can also handle multi service dependencies (a la Docker Compose/K8s)

I find it funny it didn’t point out Active Directory

Android has an Enterprise feature that allows devices to have an isolated “Work” profile from their Personal profile, complete with separate accounts and apps (though your device IDs are still likely shared due to it being the same device)

There’s this project called Island that allowed anyone to set it up on their own devices