The hardest part of an AI sandbox is not running a command but everything that keeps running after the command returns — dev servers, test watchers, database daemons, and other persistent processes that traditional code sandboxes struggle with because they are architected around a single request-response cycle. Real Linux VMs provide the necessary infrastructure for genuine machine behavior where processes can operate, restart, and persist as needed rather than treating all operations as one-off executions.