They don't need Linux style containers, they control the OS. The Linux container situation is just a hack around the general API instability of the Linux userspace, a problem macOS doesn't have.

For inferencing workloads they also don't need to control max RAM or CPU usage as they can just dedicate the entire machine to handling requests.

And for sandboxing, Apple's sandboxing infrastructure is actually the best of any OS (but mostly private unfortunately).