I looked into kata but it doesn't support Podman (my preferred baseline). I assume that touching a kernel requires some sort of rootful interface but I don't know enough about how seccomp and the other layers interact to know if it's the right balance.

gVisor felt a bit more "hacky" initially (at least compared to krun) but I will look into it a bit more as I saw someone else integrating it into their own setup.

My goal is to get 80% of the isolation for 20% inconvenience. Right now it feels like I'm getting 30-50% isolation for 10% inconvenience — I'm willing to tolerate a bit more friction if I can get a bigger jump in security.