> people no longer use low-privilege user accounts to sandbox potentially malicious software

Is it the same for containers and VMs? If not, what makes them less vulnerable?