Well they're not a "full-blown" machine, in that they do cut out a lot of things unnecessary for Lambda's (and incidentally, fly.io's) use case. ACPI is one example given in the article.

But yes, they do virtualize hardware not the kernel. I'm willing to bet you could swap out vanilla containerd with firecracker-containerd for most users and they wouldn't notice a difference given they initialize so fast.