Which is why since Windows 11 version 24H2, Windows started getting some additional sandboxing capabilities in Win32, similar to how UWP works.

https://learn.microsoft.com/en-us/windows/security/applicati...

Currently it is still opt-in, but who knows when they decide to go Apple style with Gatekeeper.