Isn't it wasteful? I know it's a "tiny" vm but still is a vm

See Kata containers.

For ultimate security, containers alone aren't enough.

Windows is also having a similar feature on top of WSL, announced at BUILD.

Isnt this a micro VM and not a container? Confused

	▲	pjmlp 5 days ago \| parent [-]
		A micro VM than encapsulates a single container inside, two levels of protection.