I’m not making a claim about its quality but gvisor is another isolation focused runtime https://github.com/google/gvisor