I would like to know what exactly is the EVM? is it a container or an actual VM? And more specifically, does every user of Etherium run the networks code? and if not how do we trust those who do run the EVM?
Every full node runs the Ethereum Virtual Machine. From my understanding EVM is just a fancy name and it is mostly just the interpreter that runs smart contracts. In fact, it consists of Program Counter (PC), Execution Stack, Memory and Gas Counter. In addition it also has a reference to the EVM code and Contract Account Storage. The smart contracts themselves are quite low level and there is no necessity for more elaborate container or so.
Every single full node runs all of the smart contracts. That is how we reach consensus regarding the state of the Ethereum at a given point in time. The miner (or now validator) is just the entity that has the privilege to add a next block and decide on the order of transaction - but eventually all of them are run by all nodes to check validity.