It’s all one lightweight VM. Containers share the VM’s kernel.

The shared kernel/lack of isolation between the cotnainer workloads is the model that this article isn't really touching but is really important.

Because the current needs are extremely lightweight and isolated environments i.e. vm per workload rather than shared.

And there's been a lot of wonderful innovations happen there

So no micro VMs at all

Look into the krun runtime (part of crun) if you'd like to do this.