Doesn't Docker's sbx do this?

https://docs.docker.com/reference/cli/sbx/

sandboxing is one of the features of virtual machines.

I'm building a different virtual machine.