Each container has hypervisor level isolation. We are not relying on kernel level isolation for security isolation between different user's containers.