Nah. The same is possible on phones – the "put every program in a container, and restrict access to any hardware or files" allows exactly that.