I mean, they just announced a new container runtime called gVisor to further increase security for containerized apps. It's pretty clear they want to be able to offer fully managed multi-tenancy Kubernetes clusters that execute untrusted code.