Apple is adding optional sandboxing to their system without intentionally breaking backwards compatibility in their APIs. Why wouldn't this work for Microsoft?

And isn't Metro exactly what you want?