qemu on its own is indeed faster to iterate and learn with.

In production you probably want the host-vm and vm-vm confinement provided by svirt https://libvirt.org/drvqemu.html#driver-security-architectur...