Just using the virtualizing features Windows already has (and has had for years now) to provide application sandboxing in an accessible manner (think QubesOS) w

Just using the virtualizing features Windows already has (and has had for years now) to provide application sandboxing in an accessible manner (think QubesOS) would go a long way. I'm not saying it's easy, but it's possible, and Microsoft certainly has the resources to pull it off. I cannot believe nobody at MS has thought of this yet. (This could also be used to make backward compatibility less painful, which no doubt many MS programmers would appreciate deeply.)