Xen-like paravirtualisation has always seemed to me as more of a convenient way to run multiple well-behaved guests on the same hardware than any sort of real security/isolation barrier, because of the cooperation that has to occur between the guest and the host. It's sort of a leaky abstraction. I think full virtualisation or even emulation can provide stronger security/isolation, although the tradeoff is performance.