[mjrusso]

Microsandbox's primary goal is to make it easy to build environments for running untrusted code.

Nix, on the other hand, solves the problem of building reproducible environments... but making said environments safe for running untrusted code is left as an exercise for the reader.