Absolutely they will & do. The kernel provides the necessary sandboxing & is faster, even with things like Firecracker.