Because that means you are sharing kernel with the sandboxed agent. Virtualization presents an infinitely smaller attack surface.