zlacker

In this context (the blog post) and the reason firecracker was created, was to isolate workloads.

And if youre running untrusted code, then using a virtualized environment is the easiest (id even say best) way to go about it.