> a virtual machine with its own kernel to enhance isolation from the host Whether that’s something you care about or think is necessary is left as an exercise

> a virtual machine with its own kernel to enhance isolation from the host Whether that’s something you care about or think is necessary is left as an exercise to the reader (i.e. it depends).