> has issues with different runtimes per container

Could you be more specific about that?

> One of those apps will get compromised and then all the others will follow...

Per their security docs, containers are rootless but I don't see anything about VLAN isolation.

https://cloudinabottle.org/docs/how_it_works/security.html