I mean i hope its more hardened than JUST a container given how many container escapes there are.

Apparently, they are using gVisor, which when applied properly, should make a pretty good isolation primitive.