[mike_hearn]

You often don't need strong isolation. The sandboxing is more to avoid model accidents than a Skynet scenario.