cgroups often make the situation worse, not better, by insisting that a small memcg drop caches because that control group is full while the system overall has plenty of resources. This can lead to a system severely swapping for no apparent reason.

Putting desktop apps into individual cgroups is one of the more counter-productive ideas that has cropped up lately.