MicroVM sandbox solves one problem well, but not the agent security problem (decodebytes.substack.com)

Apologies, it should have been "A MicroVM.." but hit by the character title limit.