For what reasons specifically? Namespaces not being good enough (if the malware is more complex and tries to exploit the kernel)?