We have isolated machines in OrbStack now! Isolated machines have options for network isolation and mounting only specific paths (or none).