You effectively have to be able to debug other processes, copy data to and from a process, and a lot of other control. What would it run as that would have all those permissions?
Sorry I was being rather facetious there. They have VSM available (Application Guard). This is only on Enterprise edition because you know, only enterprises need a decent threat protection model...