"In the past, requests went out to a hosted execution service."

They were outsourcing to another company so there's plenty of room for overhead to creep in.

v8 isolates aren't actually a great sandbox and I would not trust them implicitly in the AI era. This is probably why they wrap them in an additional sandbox.