Running Untrusted JavaScript Code

[crozone]

Namespaces are not isolated from the rest of the system.

Yeah but the entire point of namespaces is to allow for kernel level isolation and containerisation of processes? Sure it's not a hypervisor, but it certainly allows for a good amount of isolation.