And since it uses Hypervisor.framework, it does not require any extra kexts and the App Store version was running in a sandbox.