Just wanted to clarify that Kubernetes was still scheduling containers. Even if VM's are being used to isolate them.
It's not all or nothing either. Containerd will support running a mix of containers and kata-containers across workers.
For anyone interested in this topic I wrote about some other container runtimes here: https://kubedex.com/kubernetes-container-runtimes/