[Uvix]

Network boundaries are insufficient. A file share might need to be read-write for some users and read-only for others. Database access is even more granular.

Different users will have licenses to different software. Maintaining individualized VM images isn't sustainable.