How does an application run in isolation from other applications ?

Each application gets its own Linux user ID and virtual machine which means that the application code runs in isolation from other applications.