Hypervisor isolation. Sandboxie works at the kernel level which is a much larger attack surface.