MicroVM sandbox solves one problem well, but not the agent security problem

Apologies, it should have been "A MicroVM.." but hit by the character title limit.