They could be (and are on Illumos and FreeBSD) if only they were designed with that from the start. Linux has always made the mistake of not designing things to be safe and secure from the outset (cgroups/namespaces, btrfs, etc.).
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1087