Hacker News Reader

Docker Sandboxes is using microVMs, not containerization.

That's an implementation detail. They do that because less capable OSes don't have direct support for sandboxes.

No, that's not why.