Which of the following are correct statements about Alibaba Cloud Container Service forKubernetes (ACK)'s Sandboxed...

Sandboxed pods are a Docker runtime container type, and can run any docker image

Sandboxed Pods provide an independent kernel to enable enhanced security isolation

Sandboxed Pods can be run on both ECS and ECS Bare Metal (EBM) instances

Sandboxed Pods can also support multiple running containers per Pod