A MicroVM with a physical GPU breaks the isolation boundary.