We use both. OpenVZ contrainer for some trivial tasks, that we are sure won't have any memory leaks (oomguard is pretty angry) and KVM for those, that are not that well coded or those, that need some Network rights (pure-ftpd, pptp, vpn), or those, that may use a lot of memory at some moments...