That's not correct. Virtio devices have different security properties and many of them expose the host system to considerable risks. Using containerization on t

That's not correct. Virtio devices have different security properties and many of them expose the host system to considerable risks. Using containerization on the host is one way to limit the latter. See e.g. https://github.com/libkrun/libkrun/#security-model https://github.com/libkrun/libkrun/#security-model for more details.