I don’t know specifically how this container was implemented, but Microsoft has a standard way to do isolated Python sandboxes:
https://learn.microsoft.com/en-us/azure/container-apps/sessi...
Hopefully this feature is using that or something similar.