This should be safer than relying on seatbelt on Mac OS. Docker and Podman being in a VM is pretty much peak security imo for AI.
Agreed. Having the isolation boundary at the VM/container layer feels much more predictable for experimentation-heavy workflows compared to relying purely on OS-level restrictions.