Daytona uses Docker containers hardened with Sysbox by default, offering security equivalent to VMs while retaining the lightweight nature of containers.