Yes this is in fact the main feature :-) Though it's not exactly as you say it. VMs are a first-class entity. You can easily make as many as you want to represe

Yes this is in fact the main feature :-) Though it's not exactly as you say it. VMs are a first-class entity. You can easily make as many as you want to represent different security domains. But it's not every app (unless you want it to be). I didn't even notice the unicode thing. But it doesn't surprise me. They have various similar conservative features. For instance, by default an app in a VM cannot get full screen access. To full-screen a video in youtube you have to full-screen in app and then hit Alt-F11. The concern is that the app somehow tricks the user into thinking that they're interacting with the host OS desktop. Also the host OS doesn't have Internet access; update package files are downloaded by another VM and copied over. It's fairly paranoid by design, and their tagline is "a reasonably secure operating system".