Even when running things in their own box, I likely want to isolate things from one another.

For example, different Python apps using different Python versions. venvs are nice but incomplete; you may end up using libraries with system dependencies.

Yeah that's becoming increasingly true. I guess it really depends on what your setup is.