I quite like this defense-in-depth approach, but it's disappointing that it will only be available as part of the probably expensive GKE Advanced. I would have thought safety features should be standard..
> it has a high cpu or memory load, and Google would make a lot of profit on the nodes.
They currently solve that problem by having their node VMs melt down at like 50% utilization so you have to run everything with huge padding.