MXC Internals: How Microsoft's eXecution Containers Actually Isolate Agent Code

10 different subsystems? It looks like a problem looking for a solution! It's kind of a nice idea, but boy complexity will make it an absolute security nightmare!