Comment by isityettime

Windows does have a native sandboxing API that Docker is capable of using IIRC, but nobody uses it.

The macOS situation is even worse in that the kernel lacks the requisite capabilities.