There's an extremely experimental/feature limited 3rd party implementation of macOS native containers. It requires disabling all sorts of security features, though.