Comment by ConorSheehan1

Containers don't even really help that much because they share the host file system. Need a VM, and even then, agents have escaped them!