Reduces Attack Surface Compared to Virtual Machines