The FinClip SDK is a security sandbox. As an embedded component, it protects the SuperApp host by creating a virtual environment inside the app to contain all mini-program code, which is by not default not trusted, whether it is written by the same team of developers of the SuperApp itself, by 3rd party partners, or even any random developers on the internet.

It is comparable to a docker container indeed, except it runs inside an app on device-side instead of on cloud-side. It isolates mini-program instances from each other. And it insulates the underlying system of device.