Ask HN: VMs or containers for secure AI/Agent code execution?

Do you use Docker containers or VMs to securely execute code generated by AI agent? What are pros/cons of your setup? Appreciate your insights.