> a virtual machine with its own kernel to enhance isolation from the host

Whether that’s something you care about or think is necessary is left as an exercise to the reader (i.e. it depends).