Yeah, it doesn’t have container-level isolation, and one hopes macOS Containers will “just work” in a way Lima can’t boast, but still, I’ve successfully used the latter *behind an inspecting proxy*. That takes some real flexibility, and it’s all there.