“isolated environments on shared hardware”

So, not isolated environments? The surprising thing is that they used the CPU cache instead of the just exploiting the hypervisor.