While VM breakouts have been created in the past, they're about as secure of sandbox as we've got!

VMs are a secure sandbox. Containers aren't.

Tell that to AWS Lambda and Google Compute Engine?

What are you talking about, of cause VMs are a secure sandbox