Comment by weinzierl

What is even more worrying is that most do not even consider a VM necessary as sandbox solution.

The hierarchy goes something like this:

0. guardrails

1. containers (=namespaces + cgroups)

2. userspace kernel shims like gVisor

3. virtual machines

Most people still consider level 1 sufficient and they are in for a rude awakening.