There's always sandboxing/containers/VMs though. Even on Windows you have Sandboxie which is extremely powerful.