Most people browsing the web are running untrusted (Javascript) code on their computers and devices. There have been plenty of browser-based, side-channel attack proofs of concepts written in Javascript, including a version of Rowhammer[1]
This refers to tasks that trust each other, not tasks that are trusted in general. For instance workloads on a shared server from 2 different users. It's for isolation for each other to mitigate side-channel attacks.
My understanding is that cloud providers will share the same machine among several different people, therefore allowing tasks that don't trust each other to run in their machines.
1. https://youtu.be/YniqBaSK-Eg