> so saying “cgroups is newer so it must be more insecure” I did not say that. > as it is a completely new implementation of a kernel. Firecracker is not a "

> so saying “cgroups is newer so it must be more insecure” I did not say that. > as it is a completely new implementation of a kernel. Firecracker is not a "completely new implementation of a kernel", whatever that means.