Is a container breach really the relevant problem to solve for agents? VMs provide better isolation, that's true. But does it matter?

Even sandboxed agents usually have a lot of capabilities. Adding backdoors to code by installing breached packages, abusing some access tokens to cause harm, and much more.