The trade-off of resources Isolation matters, eg. OS->Container->Namespace(wasm)