[fsociety]

gVisor, for better or for worse, does a whole lot of other things than just seccomp filtering, and it shows in performance tests.