You can set it up with FreeBSD's jail as well. You can create several types of jails on the fly too - either ephemeral or thin/thick jails. And with ZFS snapshots everything is very efficient.
You could also use a VM on FreeBSD too, but I would argue that it's very inefficient to boot up a VM for each application instance. A container/jail is virtually the same as a VM, except a VM uses your host's kernel. And kernels are probably the least of worries in terms of security for apps.