The Importance of Layers of Isolation in Containers

Wasm can run in the browser, it can run on a server, you know. It can also be embedded in SDA and Raspberry Pi or whatever. Google again has a published guideline that untrusted code has to have two layers of isolation between it and the host. And so for WebAssembly, one of those layers can be the WebAssembly boundary,. The other one could be GVisor or it could be a VM or there's a container.