I didn't know something like that exists. I knew of win10 app sandboxes, but this is even more generic. I'll definitely use it whenever possible.

I got so used to this being relatively easy on linux (grsec, firejail, seccomp, etc.), but never heard of easy ways to apply it on win.