If someone wanted to make a comparison, it's like additional 'rings' the x86 ring security model, but instead of nested rings it's parallel rings. You might as well have a single OS with containers.