I mostly agree with you that using current tooling seems like patching holes constantly but it's getting much better with sandboxing and automation is key and of course, it's not for everyone but can provide lots of benefits with "low" effort.

There is a Kubernetes Working Group where the definition and implementation of soft multi-tenancy and any feedback is welcome.