I don't see a difference to containers, which also use namespaces and make it easy to mount home as read only?