Discussed at the time:

Sandboxing and workload isolation - https://news.ycombinator.com/item?id=24001246 - July 2020 (46 comments)