AWS employee here. You are correct. Fargate is an underlying technology for running containers without needing to manage instances, and it will integrate with both the ECS and EKS container orchestration and scheduling offerings.
Do all the containers I launch run in an EC2 VM that’s isolated for my account? Or does Fargate somehow provide the security isolation without being a VM?
Fargate isolation is at the cluster level. Apps running in the same cluster may share the underlying infrastructure, apps running in different clusters won't.
Is that infrastructure, EC2 instances?
Are they creating separate cluster for each aws account, how the isolation is happening
A customer creates a cluster on their account. You as a customer can create one or more Fargate clusters on your account to launch your containers in.