[parliament32]

Good checklist, but

> The actual development happens on a rented server

Why not Hyper-V or libvirt/KVM? VM escapes aren't a thing in real life (or VMs from hyperscalers wouldn't exist), so why deal with additional cost, latency, and third-party trust when you could just run it yourself?

[Havoc]

Or even a container. Unless you’re a security researcher the average dev isn’t likely to encounter anything requiring anti escape anything at all