There are many services that run applications colocated on VMs in containers. I don't disagree they are leakier abstractions but they can still satisfy a wide

There are many services that run applications colocated on VMs in containers. I don't disagree they are leakier abstractions but they can still satisfy a wide variety of workload security needs.