I use VMs for OS isolated and hardware isolation. I run containers on top of OSs for apps. That said I use Harvester so I can run containers on bare metal AND VMs as containers.