It sucks without proper cgroup limits because swap makes OOM slower to trigger. Either set the cgroup limits or make the swap small.

This requires additional setup from the user, the default setup should just "work".