The thing I'm driving at is that containers create much stronger isolation than shared hosting does. Both are processes, but the administrative overhead is low

The thing I'm driving at is that containers create much stronger isolation than shared hosting does. Both are processes, but the administrative overhead is lower when you can contain the blast radius with namespaces and cgroups. The illusion of isolation is much more complete to the containerised process than for an uncontainerised one.