For protecting your developer machine, devcontainers will provide at least some isolation.