Id imagine that they take the same kind of approach that I do with https://perl.bot/ using the Linux namespace apis, seccomp and more.

Very good question! I just take care of it. memory, cpu & disk. (Including fork bomb)!