Docker didn't support nftables for years (idk if they even support it now). I moved my personal machine to Podman because of it!

Also port forwarding in Docker (and Podman!) still bypasses ufw/other firewalls, which is really annoying and surprising (though it doesn't in rootless).