The concept put forward by Docker and LXC seems to be, from a security perspective, a move in the right direction. Afraid of a MySQL zero-day? Run it in a Docker container and it won't be able to cause damage to the host operating system.
However, it's definitely not a silver bullet. What needs to be done to secure Docker and LXC containers? What are the attack models, and how can they be secured and mitigated?