well the conclusion on this was that you are better off using OS virtualization or paravirtualization than hardware virtualization, but non virtualized hardware isolation is the clear win