It's not identical. Implementation matters. It's not enough that a system has the capability to do something; Ideally it needs to be well documented, easy to

It's not identical. Implementation matters. It's not enough that a system has the capability to do something; Ideally it needs to be well documented, easy to use correctly, difficult to use incorrectly, repeatable, and have it's correct usage verifiable. With logging and monitoring available. When you have a piece of software you want to sandbox.. how exactly are you going to do it? What are the steps? Are they going to be easy for other people to follow and understand what is going on? How do you know it's working correctly? These sorts of things matter. Not just in terms of usability, but also security. Having the same limitations and kernel hooks underneath doesn't make sandboxing implementations identical. it's still very much possible to have one that is objectively better then another. I don't know if this is the best implementation, but it's certainly nice that if you are using Linux you probably have it available already. Out of the box.