Could anyone comment on the Linux kernel's limitations that makes containers insecure as compared to BSD jails or Solaris/IllumOS zones?

Is there anything on Linux roadmap that will change this?