I have a similar question: I'd seen the notice that Restricted VMs hit end of life and were removed;  does that mean there are no options to place restrictions on a VM so users can't make changes?

That seems like a major functionality loss for developers.