Wait....this isn't new - hypervisor-based container isolation has been in Windows Server since 2016 (it's called Hyper-V containers).
One of the core elements of this for the Serverless fast boot requirement is using a kernel that has legacy modules excised.