I appreciate the humor but having an ability to run containers in a zone gives you very good isolation without overhead of a VM.

And never connect it to the internet, ever. Island is best land.

All behind NAT to make it securr