It's not the most convenient solution tho, for instance if you want to plug in a usb device and let a software use it, you need to explicitly allow that in the systems task manager since the usb firmware run in it's own isolated box too. It's a bit of al earning curve, but worth it if you really want perfect security.

and I imagine it gives things like OBS all kinds of headaches, lmao.

Thanks for not treating me like an idiot =D