He runs a systemd-nspawnd container in a "small vm", so neither really?

none of the above. a single vm started by systemd-vmspawn which then starts one or more containers for your instances using systemd-nspawn. It ends up being fast and lightweight.

Haven't checked the actual project but he does state he uses systemd-nspawn. Which is it's own kind of container runtime.