Even when running things in their own box, I likely want to isolate things from one another. For example, different Python apps using different Python versions

Even when running things in their own box, I likely want to isolate things from one another. For example, different Python apps using different Python versions. venvs are nice but incomplete; you may end up using libraries with system dependencies.