That’s also how Devin works, and OpenHands.
The agent running in a VM - at least by default - was a key feature during the AI pilot I ran a few months ago.