Can you give me an example of a case in which someone would want changes made to the OS?

If you have a monitoring system that wants to see log files, you could have those log files written to the underlying OS and everything else written to the VAA. This approach gives your management system what it needs while maintaining the complete containment of the application within a VAA – and its readiness to be moved at any time to instantly run on another server.