UWP, and MSIX on Win32 via Appstore.

There is also sandboxing configuration via Intune for enterprises.