go can let you use docker AND have zero anything in the LXC environment to be exploited by attackers, also.

i agree in principle, of course. i'd rather not deal with docker, but docker is an easy way to safely make fiddly shit made out of python, c++, or whatever the latest trendy thing is, without blowing up your system chasing dependency chains.

that's what docker is good for.

but honestly, the more you learn about what you can do with Go, including deploying other shit language system stuff inside directly controlled LXC containers... again. Go.

but especially when it comes to node.js and c++ it is hard to avoid and both systems are best kept inside a box where it doesn't matter if they blow up.