Microsoft's experimental LiteBox OS uses a Rust-based library approach for secure application sandboxing, enabling isolated execution without full VMs..
Consolidating these tools into one place was so useful, I should've done it sooner ...