I noticed that Kata have started integrating firecracker which will be interesting and should help their performance and security stories going forward. I'd ag

I noticed that Kata have started integrating firecracker which will be interesting and should help their performance and security stories going forward. I'd agree though that kata (or other VM based containerization solutions) won't completely replace runc based solutions. One of the things I like about standard linux containers is the ease with which you can remove part of the isolation without turning it all off or on. Being able to easily do `--net=host` or add a capability is very handy in some circumstances. Also the security story definitely isn't as clear as VMs>containers. Every isolation layer has had breakouts in the last year, VMs, gVisor, Linux containers.