Comment by yencabulator

It's standard practice to not let mutually-untrusting workloads share a CPU core. Spectre etc.