Google making hardware-isolated micro VMs the default runtime for every Gemini agent is a telling signal: agent security is graduating from optional add-on to baseline infrastructure. The governance layer across cloud, hybrid and on-prem is arguably the more strategic piece — that's where enterprise agent rollouts stall, and where Google can lock in customers beyond the model itself. It also validates what sandboxing startups have been preaching for a while, though Google's distribution advantage is hard to overstate. The open question is cost: a micro VM per agent sounds clean in a demo, but at fleet scale the overhead will test whether this model holds up economically. On our read, this is unglamorous but consequential plumbing — the kind that decides who wins the enterprise agent market.