Using VMs to isolate single processes is like owning multiple toasters, and buying a different house to plug each toaster in.
I'm not sure the toaster analogy will gain mass acceptance.
When Docker can safely protect a Minecraft server in one container from a local DoS attack coming from a bot running in a sibling container, I'll reconsider using VMs. :P