> Attackers can escape or even steal data from another running VM.

Then there is a bug and you fix it just like any other security layer.