Eh, I don’t believe in isolation. And by that I mean, I don’t think it’s currently actually obtainable. Servers, sure, any mitigation helps, but for end-users? I doubt it offers much protection and adds a bunch of overhead. But I do like these technologies for keeping old software running. Linux tends to have a pretty poor reputation at backwords compatability, and this is a major help.