Ask HN: Are you running your Containers in VMs?

We've been exploring various solutions to improve the security posture of our Containers, from shrinking the host kernel to hosting them in Kata VMs. Based on your experience, what are some pros/cons of VM-based solutions like Kata or Gvisor? Appreciate your insights.