Each job runs in the isolated KVM, so you have the same level of isolation like with any traditional cloud instances on AWS, GCP, etc.