Not as air tight as a container

Edit: it’s about the attack surface

microvms are better than containers running on your host. see eg the "smolvm" microvms from https://smolmachines.com