windows sandboxing btw. is barely at use. every program can basically read everything in user profiles, that is imo the same on linux. only windows application

windows sandboxing btw. is barely at use. every program can basically read everything in user profiles, that is imo the same on linux. only windows applications that do not run in full trust mode, like store apps won't do that. and even without store apps you can use something like msix or app-v to package your apps in a "small" sandbox, but you can breakout from the sandbox via runFullTrust