It’s not more secure, it’s so they can offload blame and have people to sue if/when something ugly happens. Liability control, essentially.

We had to pay for fucking Docker container licenses at my last job because we needed an escalation to the vendor in case our SMEs couldnt handle things (they could), and so we had a vendor to blame if something out of our control happened. And that happened: we sued Mirantis when shit broke.