On: My VM is lighter (and safer) than your container (...

[nailer]

The VM is an isolated environment itself. You do not need to be isolated from it.

Using two levels of userland isolation makes about the same sense as using 457 levels of userland isolation.