[SamInTheShell]

This should be safer than relying on seatbelt on Mac OS. Docker and Podman being in a VM is pretty much peak security imo for AI.

[urlportz]

Agreed. Having the isolation boundary at the VM/container layer feels much more predictable for experimentation-heavy workflows compared to relying purely on OS-level restrictions.