Matthew Green
An actual serious thought here: I think that security people overemphasize the role of containers and containment. Containers and sandboxes are just one layer. “Solving” this problem means you now have to consider the data flowing across boundaries.