[cedws]

Thanks, but what is a “Protect Zone” at a technical level? Why does it provider stronger isolation than syscall filtering?