> an unlocked system but with trusted VMs inside seems to be the next step in allowing users to have local admistrative access There's not a single example of

> an unlocked system but with trusted VMs inside seems to be the next step in allowing users to have local admistrative access There's not a single example of that happening, as far as I know. What we get is "oh, you want general purpose access? here's a sandbox for you to play in", with the system itself remaining locked.