Does anyone know what kind of isolation still can work after all the patches? Let's say we want to host users' processes or containers and some of them could be

Does anyone know what kind of isolation still can work after all the patches? Let's say we want to host users' processes or containers and some of them could be pwned. I see Google claiming that their VMs are isolated between the kernel and each other.