Qubes: security by virtualization

oh and to answer your question, don't see this in the tech report version (and the last sentence is probably going to be excised from version being published in USENIX due to space), but in the version that was in my dissertation, I included this text

"While VMs provide superior isolation, they suffer higher overhead due to running independent operating systems. This impacts performance and makes them less suited for ephemeral usage on account of their long startup times. However, Apiary can leverage them if one does not want to trust a single operating system kernel."