I would bet it’s using applocker APIs under the hood. Maybe a nicer/easier interface? If I’m right that means Microsoft shipped those with home versions despite not having the group policy endpoints. It may be possible to import local policies to manage it but I’ve never tried.