Even Windows 3.1 was not strictly just a shell on top of DOS. It ran in protected mode with its own drivers and can spawn DOS virtual machine.