The problem is, it's not a full sandbox, because all of the containers are running on the same kernel, and are capable of influencing the others, at least indirectly.

I have trouble with the idea of calling them 'the future'. So far, I haven't seen a REAL reason to use docker in a production environment.