Cloud Run engineer here.

Containers are run in gVisor https://github.com/google/gvisor as the container sandbox.