unless something has changed in the past year, fargate still runs each task in a single use ec2 vm with no further isolation around containers in a task.