Most microVMs run on extremely stripped down versions of Linux or NetBSD. Not the same thing as relying on PAM, SystemD, namespaces and cgroups to protect your application

Funnily enough, regarding SoftTalker's point, just a few hours after my original comment, CVE-2026-110264 (a CVSS 10.0... worse than PHP's RCE) rolled in for GitLab, which would be prevented by using a memory safe language to write the interpreter instead of C.