Agreed. Having the isolation boundary at the VM/container layer feels much more predictable for experimentation-heavy workflows compared to relying purely on OS-level restrictions.