Docker Desktop has always run containers inside a minimal, purpose-built VM. Here is why, and what it bought us.