Also, by adopting gVisor, you are betting that it’s easier to audit and maintain a smaller footprint of code (the Sentry and its limited host interactions) than to secure the entire massive Linux kernel surface against untrusted execution. That bet is not free of risk, gVisor itself has had security vulnerabilities in the Sentry but the surface area you need to worry about is drastically smaller and written in a memory-safe language.
ВСУ запустили «Фламинго» вглубь России. В Москве заявили, что это британские ракеты с украинскими шильдиками16:45
，详情可参考51吃瓜
I'm not saying any of this through any sort of Apple-loving bias. I typically use a MacBook Pro for work, but I'm a Windows user at heart. Windows was my gateway to computing in the '90s, back when Macs were far more expensive than PCs. These days, I spend more time on my Windows desktop making podcasts, playing PC games and bumming around the internet than I do working on Macs.
t.to_gpu(); // optional — Metal acceleration