[rustcleaner]

Qubes OS is nice for that. Set up a plain vanilla Windows TemplateVM (Windows Firewall whitelisting in/outbound connections), clone the vanilla template for each subset of applications, then make a bunch of AppVMs which point to those cloned templates.

[nekusar]

The big bummer with Qubes and Linux virtualization is that there's no easy way to spoof or lie about hardware.

Some software is invasive in that it actively scans for VM's and does bad stuff.