Also on Win 10 Anniversary onwards they are pushing more sandboxing in form of device guard and secure kernel.

Basically as a evolution of MinWin, there is now a micro-kernel for security critical code sandboxed via HyperV.