[codedokode]

This is probably for playing DRM content, apps like Netflix will provide an encrypted VM image to play a movie.

[Animats]

How does the video get out? That implies a strong connection to the screen, which has a big attack surface.

This is the classic problem with isolation via virtual machines. To do anything, they have to talk to something, and that's where the security breaches occur.

[jrpelkonen]

DRM already uses a trusted execution environment (TEE), which provides more robust isolation than a VM. Thus I doubt needs of video streaming apps are the main motivation.

[bobdvb]

The DRM TEE on Android needs to be baked in at the factory. If an app brings its own DRM then it's not able to use the TEE. If this enabled apps to use TEE like functionality it'd be good for that use case.