From my limited understanding, it has the same isolation advantages as that of a VM and therefore it's as strong as the hypervisor you use