The main advantage to doing it at the shim level is I can run multiple wasm containers from a single wasm runtime more easily. I did look at implementing this

The main advantage to doing it at the shim level is I can run multiple wasm containers from a single wasm runtime more easily. I did look at implementing this at the OCI layer (also really cool that crun does this!) but decided to go another way.