I'm pretty sad it doesn't explore Nix as it's superior in isolating and doesn't require root.
Getting started: https://medium.com/scientific-breakthrough-of-the-afternoon/...
How much effort was put into making the whole isolation: https://www.youtube.com/watch?v=73mnPBLL_20
There is even a declarative way to setup darwin process management: https://github.com/LnL7/nix-darwin