Ben Laurie's timeless piece about "just give a POSIX api" ruins the containment value of a container.

Once POSIX is in the mix you can't make clear containment boundaries.

The first step that everyone does, "Put it in a VM and then give it mediated access to the surrounding context" is a cul de sac.