The spectrum of isolation: From bare metal to WebAssembly