but that also comes with more and frankly just as bad security implications, just different ones
What do you have in mind? Surely, no solution is perfect, but at least on the surface it sounds much better than the alternative of no isolation at all, so I'd love to learn what worries you.