Can PyOxidizer be a sandboxer?

I want to build a website where people (among other things) will run arbitrary Python code. For that, I was thinking about running a submitted Python code in a sandboxed Docker container (with [gVisor](https://gvisor.dev/docs/)). However, that approach makes the project a little bit bloated.
I think it would be cool to have pyOxidizer with options to mock Linux syscalls. There's a crate called [syswall](https://github.com/polaris64/syswall), but not sure it would help.
What do you think?

Start by reviewing the proposed Linux syscall mocking approach and the linked syswall and gVisor projects. Determine whether the request is feasible for PyOxidizer and define the required sandboxing behavior and security guarantees before identifying implementation files or tests.

Written by the indexing model from the issue text.