The major difference is that VM's are intended to be a security boundary as a primary function, and give you tools like hardware virtualization or enforcing sin

The major difference is that VM's are intended to be a security boundary as a primary function, and give you tools like hardware virtualization or enforcing single tenancy for a given NUMA node to reduce the attack surface.