I think it's worth noting that what you're referring to - the JVM escapes - are exploited under a completely different threat model where the attacker already h

I think it's worth noting that what you're referring to - the JVM escapes - are exploited under a completely different threat model where the attacker already has remote code execution. In this model the attacker already can execute code on the victim's host, but the VM attempts to limit what the attacker can do via restricted APIs. It's just a completely different threat.