Nix has no security guarantees, nor sandboxing primitives. So not really comparable.