Earlier quoted context omitted.
What if you use tools like bubblewrap or nono inside the container? Say I want to use pi inside a container. If I wrap pi within a bubblewrap or within nono, how is that less secure than using a vm? Also, I think most people run containers inside VMs anyway and not directly on their hosts (on Mac and windows you have to use a vm anyway).
bubble wrap is just doing the same cgroups work
Depending on the configuration, bubblewrap can substantially reduce the attack surface.
It doesn’t change the fact a malicious process is still attacking the same kernel , but it can reduce what it can do to that vm.