I think most modern operating systems have app sandboxes also to protect the system.