[fc417fc802]

A VM is more robust as a security boundary than a container is. Still not as good as independent physical hardware but certainly worthwhile.

[k_bx]

We're not talking VM vs containers. We're talking VM vs no VM at all in base system.

[fc417fc802]

I understand that. I'm saying that wrapping all the dev containers up inside a single VM serves to further protect the host system from the dev containers.