> Additionally, since Windows Sandbox is basically running the same operating system image as the host we also allow Windows sandbox to use the same physical me

> Additionally, since Windows Sandbox is basically running the same operating system image as the host we also allow Windows sandbox to use the same physical memory pages as the host for operating system binaries via a technology we refer to as “direct map”. > In other words, the same executable pages of ntdll, are mapped into the sandbox as that on the host. > We take care to ensure this done in a secure manner and no secrets are shared. I would really like to see that last point elaborated. They claim it's completely separated from the host, yet they say it maps to the same physical memory, yet somehow it's done securely.