Comment by ben_w

> An alternative approach is high-level emulation. Running a separate instance per application gives you process isolation (via the host OS) for free.

The AI know this too, and that is a way to rework the OS.