Sandboxing is quite easy (user-wise), once you install the sandbox system. By default it allows only a single sandbox, and with small `.wsb` file you can drive what's visible from the host, whether the GPU should be active, etc. - https://learn.microsoft.com/en-us/windows/security/applicati...

It's great for testing, and Sandbox is just the tip of the iceberg of what Windows Containers support

- e.g. maybe someone can come up with "launcher" that goes through it (somehow).