I'm raising my eyebrow a bit while reading this. It conflates build tools, Debian packages, and Docker containers as one big tangled mess or abstraction. More than half of it is about everything BUT containers.

There are proven methods for providing security and governance of containers in data centers. It's a nice rant, but lacks the whole picture.